{"report_id":"38cff264-7c10-420a-b83f-386873a9dbf4","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-03-10T23:38:46Z","url":{"schema":"http","addr":"swap.blockdag.network.collabscare.com","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"title":"BlockDAG - Swap DEX","dom":{"size":75902,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1597)","md5":"4c6e61524b015bedf71584f7be2baaf6","sha1":"65b9b21d0b8e83c46c27736aed2eaa7828d3b2c5","sha256":"572e555839c8163b85111993daa0fdcc5ff31f279f32cc8df035f9ef5cc72561","sha512":"5a5f124ec2f50431c6bae3acefb4163999edbfb0a0e873b23b1b61b47625eac44d6d63cb20f83a38711f013f03c4441b2f617108187f70dfd5335bf4511c9031","ssdeep":"1536:CReaKiJFXwKVNiI2pDvcC+emB+6ejJBm3CsryHdas2k:qB3ejJ8Q","tlshash":"03731b72b6f115157257d058abebab5e35208003d20dc9343e9c63a5dfceaa28a773dc","dom_hash":"domhash48e13aec0ab09d2d7cccde918f958bed","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"swap.blockdag.network.collabscare.com","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T23:38:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-10","alert":"Detects file containing Telegram Bot API","trigger":"swap.blockdag.network.collabscare.com/combined-scripts.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"swap.blockdag.network.collabscare.com","ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":92,"request_count":90,"received_data":1344739,"sent_data":43884,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"EmailJS","description":"EmailJS is a cloud-based email delivery service that allows you to send emails directly from your client-side JavaScript code without the need for a server-side implementation.","website":"https://www.emailjs.com","common_platform_enumeration":"","icon":"EmailJS.svg","categories":["Email"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":5,"received_data":246830,"sent_data":2885,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":15848,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-03-06T11:15:16.546698Z","alert_count":0,"request_count":1,"received_data":1347,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/combined-scripts.js","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"md5":"42b394707a66ba6ab91faf579458c942","sha1":"f0c3bba0aebc9d452f58acde90391c8e5866ad60","sha256":"06c1bfa83202a027b0c8d97f8d04178ff08a0b66b98b5a0566ab036975e17e67","sha512":"31bbf36da6ab256ad290957c7ffd5abfe9dacd3012431ba1d3bc3249d0e9adc8d3f6ef54c6bac205837bc4639843fcb3728392b3cec49173c1dea359e6f07a02","size":170368,"token":"7656031386:AAFgWJZW6afsQmDITEW8eVF1c364lrHB9D4","is_revoked":false,"bot":{"token":"7656031386:AAFgWJZW6afsQmDITEW8eVF1c364lrHB9D4","user_id":"7656031386","username":"myworldsbots_bot","first_name":"myworld","last_name":"","chat":{"chat_id":"","title":"","type":"","bot_is":"","total_users":0,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8209db3f43baaf38207494d6b512de21","sha1":"4c42d18b6b20acd9de8721919bd10dfee7ebbba1","sha256":"a4e4c6e1684e18dc56541490aafaf870f0d788b8e863f7782738beac0630b3a2","sha512":"a35e81dd83a8eaaf26623020466ab377a54af94a6a264e4857798a12128ea25016d3c63510d1e6be44061e40c6054f3335921fe0cda1d41406ae9fdb17c1238b","ssdeep":"","tlshash":"76b022af00f33822c0eb33c823cf000020b30b0b002ac0803c0c0bcc0f000282bc288e","size":89,"data":"","first_seen":"2026-02-05T07:43:22.702654Z","last_seen":"2026-04-18T20:11:22.005307Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed062a1da7d7767af463bf2ff84da924","sha1":"1aac982de69ee61bbc39177df2b8fc92d5c4e6b5","sha256":"067de1c72b660374d58b82b93a55d92f0cfb0e5e6484711f9ad32cd871cc9d5e","sha512":"f3eeacaee3c770c6b2e2fd4ae77f3c5975723bbbbcf69e23a2dd3c2175e7fee6b143d23e75670e784b211bd8aa75a8d6bfb53824df03fef05cc469140d1b33cd","ssdeep":"384:aZvlFBm3Cjh++qdVrytFOIRmbFofaaju+H3r0h8gjgNB:adlFBm3ClhqdVryHHRjM8goB","tlshash":"16b2d7babae32070aa5b716d5bef5668383041035d0dc6103c8c93c85fd1e6465bbbed","size":25080,"data":"","first_seen":"2026-03-10T23:38:53.5602Z","last_seen":"2026-04-18T20:11:22.007027Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9bfac5c7514cfec20b662fa20a4274","sha1":"712ad500a8702496e78c460257c2f50564a0e453","sha256":"8a736cfdf28f5cc851d668c98640eb1f2441677c1a5f3ed4e3e349e01c483858","sha512":"6dca2856f9ac2f575ea02cf6deaf5bda3ed46b89c8831073ee05b94199e765c85aecd9638cdf28faa7c5010637a4b0be5c46e4a73f0857281e3edf3a8e5b5430","ssdeep":"","tlshash":"a8018b3b1c7350650b1771b9036ff4063525203b4185c90abc4dc6695fa0aaf9e28f98","size":751,"data":"","first_seen":"2026-03-10T23:38:53.56104Z","last_seen":"2026-03-10T23:41:29.063816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/combined-scripts.js","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42b394707a66ba6ab91faf579458c942","sha1":"f0c3bba0aebc9d452f58acde90391c8e5866ad60","sha256":"06c1bfa83202a027b0c8d97f8d04178ff08a0b66b98b5a0566ab036975e17e67","sha512":"31bbf36da6ab256ad290957c7ffd5abfe9dacd3012431ba1d3bc3249d0e9adc8d3f6ef54c6bac205837bc4639843fcb3728392b3cec49173c1dea359e6f07a02","ssdeep":"3072:Bwfqh7mHUehx6xD5chKvWj7R2BwxVUwY0vGbF:yfqh1D5chKvoR2BwxVUwY0vGbF","tlshash":"09f383129600c3bd1133cb389b76419efb65430b82004ba93eace3585ff558796adef9","size":170368,"data":"","first_seen":"2026-03-10T23:38:53.490012Z","last_seen":"2026-05-11T12:52:48.198241Z","times_seen":7,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-10","alert":"Detects file containing Telegram Bot API","trigger":"swap.blockdag.network.collabscare.com/combined-scripts.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Exodus.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Exodus.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:38 GMT\r\netag: \"51f7-69735d46-73e0bbf4cfe30535;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 20983\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"01d3635baf1954f7d844289df2aed368","sha1":"c825f5ba18a1b388f1cb0c35d455c4b27b7e906c","sha256":"e9cee107605ed19417ab49051c9e64043e72e1269eb8677d2e9fbac4608a2b96","sha512":"e1c13f6fe38a57a736debc04f345dedcbe3dfb69275a32e84bd99334e61c4c7e346a0f5fdb5807fed294e55dbd22fcdf6b55ca1060b393a5256e1cbfd9f364a9","ssdeep":"384:8Its077WIm2gVRrNeJnokrgsjmHxCNq8xY+klISSTJdwTaojgBZR9vsXlx:dssA2gXrmnOEmHxB8xYf8TJdwm3BJvsD","tlshash":"3a92e152b95cef718a2b42df0c09e846679c08aab43ba7f073125c52fe361850f12db8","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.169588Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1257,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Zien.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Zien.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:31 GMT\r\netag: \"112d-69735d3f-a94d71371d63e3b0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4397\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"c2713840a36e1b8f65aa0afd4f69f608","sha1":"846595258bd6c917fa3c996a0236fa5f4286db77","sha256":"08d8771f24cca89b5a4b5dd23271fc6a16feb90e6c909666e7cee43e5751ece2","sha512":"037b827f29bcd9377b29593384ae3d371a2235997d66162e5901c9e2bf1b5815f845a7cf21b79af8622f3f4809b62d0051101150ad0a480e926106c91652c3b3","ssdeep":"96:fDwlgb+eV7EoPzbSL3TisxtDB2NxaU+PINdk1h+Rd5w/4t4cZqm:dye1T23TiwsD+OdW8vG4tlEm","tlshash":"aa91c6693a4de986866f07719c5af1c5391517a606b82e8223af3c79156380ff81ffc4","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-05-11T12:52:48.100838Z","times_seen":26,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Theta_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Theta_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:39 GMT\r\netag: \"4021-69735d47-6ae0fe72457c71ac;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 16417\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"beb259f2dba6dea4ebed991348c0e7d6","sha1":"adffd3892409c3d1425af11e4a6bbbf9b93ad5b9","sha256":"80b8fd413ddfa5dd0f498bdd0345714c9e9a5535686c057253c5e44b99627c2f","sha512":"96d42eefcccbdaec969a7c95ab96ea00825af7758db54c0144946ef3d276a1a370a1c81fb548e4f2006a2eea7cc208cce849f3319d4d93e0f16b4820bac3ad21","ssdeep":"384:VqfT9Bw6N36Hl5nHYTSVktbzwC8XS1OaGBm1X2AeqyHSA80:Vqrc6N3Uh0GS1OaMIPQ7","tlshash":"bc72e04d6bc4336a8f8f2154b4bf7e5f957ab362ce0b4bd2cd94b1ca306061ac585670","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-05-11T12:52:48.199946Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1076,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Litecoin.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Litecoin.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"f3c-69735d3a-7edcfee71c2c02e7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3900\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"e697950d303ea56560560dedd4fd2334","sha1":"bd37e6d4130c5bda4ccb8c77e2fa114057887f24","sha256":"3da1bc0d13022561b0e40c517e851b63b87396bdf702e0baa27f36e70c71aa51","sha512":"c6419fc8e2364bb331df724e571fe9862b570006457cb48efa8b5b552d60595c2116aae7c4489191266d846a082cde1b203d43803e9856816c324d75a3f7a6c6","ssdeep":"","tlshash":"67815d3b32229fb580e611faa9a0d468e742c727f9bb661136c56630605337d9cd0671","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.140423Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1215,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Ethereum.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Ethereum.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"15a8-69735d3a-f0deae3f12983a16;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 5544\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"361a603c40b0472bb1ed540aeef52cd7","sha1":"6b406ee5cd82146b386cf1b99cf63d805bf88b73","sha256":"5c880b63fc1499657fd6a87120b58762b01c3a10313479b82fa0d832c49d7076","sha512":"ace131a5e4a2257a9ec72407ab3cc0559d3565f9acc562f661bffb0a293e36e05defdffc9dc53baad350435eb3fde6dc96c6ffe4e9f182f438f2e7afca140861","ssdeep":"96:SO/FfvUrzNuz/bFN3JFu9b3+4WtxrfmH8g3/hMgWxnQj36pucmE4JOEWdtmXGG0c:SU5vCzAjF3Ah+zmH8gHWFQjqYc54QmXP","tlshash":"21b17dc04a229886962cd81e5f21cd7cbd8dae6a862498ad464c821b5f0b71646df9e2","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.116368Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1259,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/favicon.ico","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:27.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Omni.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Omni.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"f37-69735d3a-54fcb4d49720a4f6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3895\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"7d26b6a2e1a415b963cd346497f4edd1","sha1":"a9017cf0003163446b0c1c431d35e856458fea35","sha256":"3e6226c7fb1631236e24e2ad585fb110bb634c7a9ebd1b14a796b5dd1ed81620","sha512":"c204078a1b9c6bc7f34bec50772178d80a706fb3fed88715ef5a5d07e39ac9584edcf98dcc8a29ac77ad6c4e2b3f8ab02538e8567c61f28366af9c616dfb13e4","ssdeep":"","tlshash":"c8818e48ee14b05ec43276f8e12669e36b6b750b2730129c00c2c0b15da0f89a097b0d","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.138746Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1214,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Trust_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Trust_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"21db-69735d3a-2e156a54fd0b9900;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8667\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8667,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d4aad163a419d74b4894997f20d9307f","sha1":"9b29c11c6afb3aaeef30e3b81f41818a1db34e2a","sha256":"3dbc3e48e149fee7a73164c960ade400b4f8362b32655726c0a1202ce398d5bc","sha512":"7d4f9df028401a20d9de96a3948f7f4ee7ea50fb5aed385b1677588fc13e01ae8ea5369cc55b4a830a8c60d945b9199eacb6dd4d625562a445a558b5e69eb671","ssdeep":"192:23SjXU8jA+pq6Mi17yoNk3Yh/UmBaZIXCI7bF7sKQ:2CjXJM+7Znk3IX4ZITy","tlshash":"1802afe25085b7c6dbc435bff7b1d8096c9dcd76097207e15a2a339718f0506f019b92","first_seen":"2024-05-08T09:53:27Z","last_seen":"2026-06-07T06:53:20.470318Z","times_seen":190,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/OKX_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/OKX_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:28 GMT\r\netag: \"577-69735d3c-f3f940effd9ed147;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1399\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"5b6d03daeb1568d094cb2cf8fdc17259","sha1":"4c829fdefad55a31fa9ca3b572ad510ad9ed0a3d","sha256":"de1a333a6a4a1144699d4b3207d352bbfec7b19c22062fbf2d8271943e781216","sha512":"f4d7e5ca8c2a721dbbb7f075e9ea1dcab3bcbc902480d95a71841d17b0eb25b5c186b552692c50cd5bb04323629888a97d52ee1cb555b29526f2790e23313178","ssdeep":"","tlshash":"ca21c5b8fd497088eb69043308943cc1ae08daa9ad6645463d5a248bfe319f17a0cfc9","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.122694Z","times_seen":176,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Zelus.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Zelus.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:32 GMT\r\netag: \"63d7-69735d40-a9548c48fe92a3b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 25559\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a7e65aef10cc0fa31b2d308fb8eebc5c","sha1":"7118f062a1072c30cab4a8b6095fbb26e3a58b07","sha256":"c994a8a28e43492cb76d39cabcaed22b21c2e7eb61b1093a4dca46908714a37f","sha512":"df0a86b795c53985b367f9cfad76bfa5ad30d9e2f1d3d4fec38cf75a4d3751cc228d889070358dd62667676948e75c1840f82bbe6c6029de181ad23f72775cbc","ssdeep":"768:0Aa2222222222222U6PoZ1Vbs0ZNPW/4HF66FV3K7QThSwgjBn2222222222222v:0MPgjs0ZNuQHFV2QThSbjBe","tlshash":"f7b2e13aa82e76fb2dd4239276210a1314e265fdaf2ac744dcf288a525363475c33cf4","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.200531Z","times_seen":28,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/PancakeSwap.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/PancakeSwap.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:29 GMT\r\netag: \"7e30-69735d3d-41b1e56f66d24e4a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 32304\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5456fcc222a9fe2dff66996646d3acaa","sha1":"939a577bd09c35cd764754164459a41ee313082e","sha256":"cfc2b3baeffd950725e3184e3410ea9c3b865c308f68fe61ea2069b2eb5e8215","sha512":"a230e4bf82292fb7568b8ff5ea13ca0339540dd064b0f91ef2c2f87e450f0cfc3c5aa83ea3fde4b0237333416b548f2d4ac8ac3d3f06ba36f355d1fab229fee4","ssdeep":"768:swndtPB/JTbygJHeDIXalbbLzZfxuC24l9fY0/E9JSjgoHnOXq:hdtPbTtJ+DvvZ48dY0/4VUnl","tlshash":"81e2f13026a3894224f350056948ffe95d724293efb9fa7e288e036f518e48c62df765","first_seen":"2024-05-08T09:53:27Z","last_seen":"2026-05-11T12:52:48.156019Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1198,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/OpenSea.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/OpenSea.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:41 GMT\r\netag: \"8e3d-69735d49-d83b34d3c7851737;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 36413\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"88d0a84d175da07e243fd238c78b7eee","sha1":"45403dca8fa0ac8c626eaf27ca5b3c0a683672ef","sha256":"43b0b46f41e4a0a156ef7a353103527cfcfe462d3b1f48960329ec4f93ea7b0d","sha512":"f9d24b78d61504d6b553b8c4786c4004e0363a1dfc33a732197cc9056d4edf1c88d7ef3ca5dc4ff31925559ec22c706a50ae66e4b7603a445e554581314f8b84","ssdeep":"768:rYdxUpMqNWSW+SQpMk7+ZmqdhmGNY0gqGQU/ki7TT0iSbocexr3Huwh:cdx2Mqh/T6M+YqWki70iXum","tlshash":"04f2e163e304a396b807235b0aef5854a7bee8925dc6d2dad5bc46724c0bf433db2315","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-05-11T12:52:48.131835Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1205,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Odos.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Odos.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:41 GMT\r\netag: \"3b8c-69735d49-f365dca6e2029cac;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 15244\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2dd28197420c88801a07149af68aa4fc","sha1":"961dc0c7df00126371ed8f1a5c8b63f913abc820","sha256":"2353262ee03af952d9769b4b59fa3b82cea2095d791d2e5f674e6bcce7bed7aa","sha512":"93c414dbedc2dd88fd807ca5876182a5fdbf136bd9bd57d425e0cf4b32c4178d2bed50c29ba0ec3e4724dec262a41c03f00b4c982060066fc196f04675e497cb","ssdeep":"384:jhThaOD6hBoOz9/2UAcH3n7mL/tQ/HFlYUjn5/qZZQi5DoY:T6AOzM+37mbQlOUjn5/qZtR","tlshash":"fa62d0bf3cd991355d6a4f266701cd1ff2e1c807e154418b2f83139a44724e4e687eda","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-05-11T12:52:48.142032Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1216,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/MetaMask.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/MetaMask.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:27 GMT\r\netag: \"8914-69735d3b-585b1819c1f7b6e9;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 35092\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"61958abffd3b548a38436be936785c48","sha1":"12cd1b9c407530d716f6a49072a1e42e7a9a67dd","sha256":"7d909c25e2b613ada85c6fa33a26f2ad519ae129753734b6a43850dd0513b296","sha512":"d80b1ab06d35ae8f9dbd780c684a8c13594b183164ef7379842433cdda1b091f747e4c21b81e26515843c4b83bb430a2af8d0eb78d6c6e0dac09cf20390f9a8a","ssdeep":"768:1bcwzJRSxZ33Th2TFruommFCkLPCB+boEjnHuc5mBVvskupDrAhqa+LI0z:1VzvOTh2gGMsZoEjH5m3vzupRLIk","tlshash":"82f2f1bfa0187c29ee1395112676f0dc2135268f1d40f68e4b8f1ae7daa28f87074643","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.159504Z","times_seen":175,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/css/modal.css","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /css/modal.css HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/combined-scripts.js","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /combined-scripts.js HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Mar 2026 04:31:15 GMT\r\netag: \"29980-69a3c113-a16708c5c88305fd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 30504\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":170368,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40768), with CRLF line terminators","md5":"42b394707a66ba6ab91faf579458c942","sha1":"f0c3bba0aebc9d452f58acde90391c8e5866ad60","sha256":"06c1bfa83202a027b0c8d97f8d04178ff08a0b66b98b5a0566ab036975e17e67","sha512":"31bbf36da6ab256ad290957c7ffd5abfe9dacd3012431ba1d3bc3249d0e9adc8d3f6ef54c6bac205837bc4639843fcb3728392b3cec49173c1dea359e6f07a02","ssdeep":"3072:Bwfqh7mHUehx6xD5chKvWj7R2BwxVUwY0vGbF:yfqh1D5chKvoR2BwxVUwY0vGbF","tlshash":"09f383129600c3bd1133cb389b76419efb65430b82004ba93eace3585ff558796adef9","first_seen":"2026-03-10T23:38:53.490012Z","last_seen":"2026-05-11T12:52:48.198241Z","times_seen":7,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-10","alert":"Detects file containing Telegram Bot API","trigger":"swap.blockdag.network.collabscare.com/combined-scripts.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swap.blockdag.network.collabscare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 15:26:35 GMT\r\nexpires: Wed, 10 Mar 2027 15:26:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 29511\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T21:14:38.461488Z","times_seen":206434,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":334,"dns":3,"connect":42,"send":0,"wait":43,"receive":59,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swap.blockdag.network.collabscare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 15:26:35 GMT\r\nexpires: Wed, 10 Mar 2027 15:26:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 29511\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T21:14:38.461488Z","times_seen":206434,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":362,"dns":2,"connect":44,"send":0,"wait":73,"receive":32,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Best_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Best_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:44 GMT\r\netag: \"32a3-69735d4c-29470208ad647418;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12963\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9bee63d12b3f9e480c0a98911cbe9826","sha1":"0e274da7064b70096079e4932006c1d7377d9dd1","sha256":"c83f9fb8386056d814b62f943648e05773fa53ae6ebd881fbfc90c7e7b7da58b","sha512":"c8d1f7f1c4b85a61cefd594da951c52474a89091218c40c025a3141d8eb70408ed1bdf5b3c2d8a25892481578ca33df2f8b5658fb092f9efd27f67c61b13af90","ssdeep":"192:J+9zOKDz7NdWgVb0HA0ilXv37qy81buqxxcU1v1J+mf2BpJ0et8VFkBdjdxD:c1DnLn0i5rqr7cEvv+dBpJTuVFAdhxD","tlshash":"4942d0d8e076d2281b4d857fbc3548818bbab72c9b309d35e12174a1619bd3d8e5f31d","first_seen":"2024-08-15T09:23:11Z","last_seen":"2026-05-11T12:52:48.196083Z","times_seen":175,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":900,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Core_1.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Core_1.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"676-69735d3a-399523b6f502bf37;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1654\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 120, 8-bit colormap, non-interlaced","md5":"7ab53068b332079a06c838c91755957d","sha1":"62bd15eaca249b9adcdbcecd01d2797d4d14e35c","sha256":"c7c4569cc1bfb487ca2b8a5542987466421e0629126e4b8c12b4924674957b37","sha512":"d484154c1a0fe888f1e5a7bad78c57eb0903f80ea8df43fa59bc79a8b45976bfe62537782ea0c3d8b45c30600239c9562970c9ad13eea4c54b03c4ce36436bd6","ssdeep":"","tlshash":"6c3118ea22f6497fe00a0ec2c206ea792f21e947fe381600f48b7c2c65580083161cbf","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.180316Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1269,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T23:38:24.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 07 Mar 2026 06:18:09 GMT\r\netag: \"122b2-69abc321-d52400604f0413d5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 13608\r\ndate: Tue, 10 Mar 2026 23:38:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"EmailJS","description":"EmailJS is a cloud-based email delivery service that allows you to send emails directly from your client-side JavaScript code without the need for a server-side implementation.","website":"https://www.emailjs.com","common_platform_enumeration":"","icon":"EmailJS.svg","categories":["Email"]}],"data":{"size":74418,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1595)","md5":"3d299d494cec3a9fdbb0b2ee113173dc","sha1":"f423a0db81c9c096dcd1aa83a65fe68c074ba598","sha256":"612bc3f224af152b0f6f3097bfc11137f554278084fed32503588276e94ae019","sha512":"a6665a98a8b971c7bfecd5463a05fb46fa3c8f17a6a1e5016b81ab64f9df094a0db9d0e9ff1955e735525e92a35049ddb92c05ad00e2bc9adf98285e6329e127","ssdeep":"1536:9Rr0q+jJpdZS4zlcG4DJ1a0QMclqkeZJBm3CsryHdbs2K:Ul5eZJxm","tlshash":"86731b71a3f11410726bd059ebebab4a35108013e60dc9243edd53a5efce6a29a773dc","first_seen":"2026-03-10T23:38:53.493125Z","last_seen":"2026-03-10T23:41:29.018145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1737,"timings":{"blocked":658,"dns":228,"connect":210,"send":0,"wait":420,"receive":1,"ssl":218},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/js/email.min.js","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /js/email.min.js HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swap.blockdag.network.collabscare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 15:26:35 GMT\r\nexpires: Wed, 10 Mar 2027 15:26:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 29511\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T21:14:38.461488Z","times_seen":206434,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":101,"receive":11,"ssl":347},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Velodrome_Finance.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Velodrome_Finance.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:36 GMT\r\netag: \"2f97-69735d44-91902cd6f5f829c8;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12183\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"902c3f7476f37339da5c5325d28e2215","sha1":"3154eb4a525f4c11b0afe57bb30b0d29e93da40f","sha256":"9756f1187424ee4932097cb44bcaecc7477c4d72360de0f0185f4aae8f592c2b","sha512":"e3906156ff5fb875f43edf8a536d558e4b321e2e7844aac94e12df4fc8c5ae06be3722c443c53c81fc8ee9e4ac3e8a673d2d709e53e3c9772550afd8ccebbecd","ssdeep":"192:IeHw1EPP6ySy+iYwKrhHFMM6R/B8h0KmIymnwZzdvJzCHi+PVEejVu1egMEFgf23:hQIZciY9FHF76BB8FyLzD+PVEKCpMEFV","tlshash":"e242ae9658d0db5a1024653333e07a4b8b93cf094437df1df6587aaaf632227b103e52","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-05-11T12:52:48.171205Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1035,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Talken_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Talken_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:36 GMT\r\netag: \"5797-69735d44-dbc125ddce8a0fc0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 22423\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f9f222672574c3b3b90a7be8fec0d40e","sha1":"9cd5acb0509f1638c19f05263a567401a389d2e6","sha256":"f00e82dc930532694eab43d76fd48c5a72c3833179299caa7d290d4f574c4128","sha512":"44c8e0173edc2517e27df0ac0c7d054661330394a9fd7416b64c9c1e4f71dbf74d4b5773deb90147610b45ec5bd874f30232f22a18bb7e272236aafe183d5608","ssdeep":"384:umLErZAtATomI5jCxjnXn4iEno2XEYIgzys3NOsyeaUy56BrxIa:bUZA0jIIx741o2Xd92WRJ","tlshash":"4ca2e1d67afe4b54c0798c41f78ef9cc36f280bf16ec391a4972eae1aa49c4599053d0","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-05-11T12:52:48.15115Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1080,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Solana.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Solana.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:27 GMT\r\netag: \"bf2-69735d3b-1cc1d182fcb090a6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3058\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3058,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"8aeadd34643558372f991cdac88a96da","sha1":"d8df97751447f252bc7815ae1589462dfefc34f4","sha256":"e24048166795fffb94b829cd6fc60dbf9e3c685e4bc40c37cc9fdf39972ccecc","sha512":"e3fc2dbbea900acba39402f11740f9df9d8afb2b55da258cab07242cac8102f28a2d336ef6550cafc02ec75ceec2400125dd47cd719c0d6b0feddac2381330f9","ssdeep":"","tlshash":"99517d9e92513c3623844e26de212287a8d6419d7d372384f515848c76349d2bdfe78b","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.120878Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1188,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/images/Tether.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /images/Tether.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Mar 2026 22:26:27 GMT\r\netag: \"584-69aa0313-b5b8afe43bd3c129;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1412\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"035925b9774fbdb678334a60645695e1","sha1":"bf34cfe72d30f64fbd58d4573d8b00bace9f9d9f","sha256":"8269c9c90736611dd43e6e9e0409bcfd46e719289decc432fab8ba85f622be1a","sha512":"9008e4b02ced86aadf15325d8c179d7427f0085381b4ec7c3e6b4e9cfc30a4815982cb33ba22e20727276fc0f345ddce717bc6c8ba40f4ebfeedaac92089bc3c","ssdeep":"","tlshash":"b521e6eb3165423c08a1b5af452487d1ee6528ac8faec16ed2525644f9784aa1a0d1b3","first_seen":"2025-02-11T12:35:52.335215Z","last_seen":"2026-04-18T20:11:21.990067Z","times_seen":27,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/bitget_wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/bitget_wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:41 GMT\r\netag: \"1ee7b-69735d49-e3ed72b7ff7e2c8f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 126587\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":126587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"cba7d2c7d5b7500ba7b2da925d0225f6","sha1":"79af64be7a938039ee179f8b3cd9ce2a30867ae6","sha256":"ba5c2a5ac31177ae33aa47ad1a35d8bc9cdd3e02f7d46bd745088c53236b95ef","sha512":"5dc1476041a18833e33d1d73795436b3a775954d65b486826511a24166ba9a5b6a5ce85416de50f364746610bc84534f56c7efe7424bd383a39fab3aa2451023","ssdeep":"1536:DuB0Tr9AM/wQALwxzaWK4Tt3Ha/NYOOj7Hp1GZTf7fi0uIfMUOHfX3US5nOETnCw:csrKM/5AmzdPK/KOuwRK3QErCbtGvf","tlshash":"26c323f34410f2d18b2b45ee44d96fb5ed472f559f114f02193ace6f3a6c97b240a8a2","first_seen":"2024-02-05T14:32:15Z","last_seen":"2026-05-11T12:52:48.168019Z","times_seen":73,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/rabby.jpeg","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/rabby.jpeg HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 23 Jan 2026 11:36:24 GMT\r\netag: \"1269-69735d38-88218cbc4ea12790;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4713\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"a2ca0dfe3500cf5856b3951ec0e1f615","sha1":"edb19b3304b8c1f34f800e59207821d98cd5aac4","sha256":"bc62b916f4ca91510158a9007a7576c3c6ebe3649fa3f99ded18bb4e6c1d7d67","sha512":"0c60f29684ba7243fd7d4d0980cb8f0ccdbadb7386fa10fe2bba2e4b1ed445a00589bf31f20684c1d7d28dadf618dd7f3f70a5355fe32ca4348b3cb109226ac9","ssdeep":"96:Kfn102a2Z6G5+kzZpNjxRvcP271LNeeM2ddgRq7:K22a2YG5+kzhDvcy1LNp9ddAq7","tlshash":"aba1afec7b939434c349117087223e2511833c2f73704f674232a691eaf4a057ee6766","first_seen":"2025-06-09T10:56:42.714093Z","last_seen":"2026-05-11T12:52:48.099626Z","times_seen":30,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/zkSync_Portal.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/zkSync_Portal.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:42 GMT\r\netag: \"12a2-69735d4a-dc4108850df24941;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4770\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b386c5101810ec5aa8d0f344d095636c","sha1":"d9751bcb8f5199445e0072be762a45413fa31154","sha256":"de7e8dc8e7dccee615faf76bcf585c51a78d9fd88e5447073e41b6220ce616f5","sha512":"c20a3761e0cd6e94d571a201be4c6626ee3fa6d3e12cee98ebb51d78c83e194dbe00e60cf9086e180cfe551075c258504c8f36bae259d441084043e5c5972bd8","ssdeep":"96:c5yWUxRYww9s+Jn85x9HZWupfsOPBmPJC7/Yu3mmnis8jB7pQUfm86qRouihvQp2:5YwV+Jn8lxNM87b3vniDBeUfmLZ5QA40","tlshash":"d6a14cc657ef6e29dd4a68b65a70b4b440e42377f677d23c3944c2aec2085ec06c587b","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-05-11T12:52:48.172679Z","times_seen":26,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Synthex.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Synthex.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:34 GMT\r\netag: \"eeb-69735d42-b36818a0200d1bf1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3819\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f61d51edafa1cf0b89980b365e699975","sha1":"7c33e9ae9c1b59803c49c61cdf320f75aad1852e","sha256":"1ce29e2794505b072a2550339784b47c29fdf206cd5eff0d0f217967d16ef944","sha512":"44e0f4e8273640743f753a59edcb296be6214ed067954107ae795c6656c3a441466a4e2533c49f98bd4258191ef2460ec6008def7a2943559d887fe2188f6b2e","ssdeep":"","tlshash":"95717defb545357fe6db74b7d3620c46cf4612080998b7066940bf210ee382e87b071a","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-05-11T12:52:48.193781Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1087,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Robinhood_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Robinhood_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:41 GMT\r\netag: \"232b-69735d49-8b35098d0ab24087;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 9003\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"53394c6b850557f934fa2f5f5832c20e","sha1":"f015c140965fe25699e19e61b2e417fe356f940a","sha256":"7c669bf88b4af64917c9470ef630be65c34ab887c36f4001d3e8ed799696e2a3","sha512":"8f20c8fd5924f37ab7547cda1280ec3d0dac2963d04a44b3eebfe37bcd9c214c407ce7789d6571afe3d45ad88cf520cad495b647c7efa39f77cd8fd783ec7e2d","ssdeep":"192:lsGsGMSO2fUeV6ISKmFUKLR1RwZlW7zZ0oExSYuGE2z0pAuerzVtBTVM1iL:lsGzMSO2fN6IrrK91i3W7zCoExSYLE2l","tlshash":"6702af748cf9615ce88814772f26cf051cd8db3eaa809785a0f76fb00d8e3465d4c896","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.176523Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1187,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Polkadot.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Polkadot.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:43 GMT\r\netag: \"1074-69735d4b-75cebdce90d00bd0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4212\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"82569d3150fa29c871d1cd5c9ee6e44e","sha1":"da32a8af5037807bfea7ab6ca618c5c06c02d176","sha256":"1628ac2222387198d434924526ab95535a245c8fb6735a637b4ce87218505575","sha512":"f1831dd9e8c993d8e45dcf1640f78448c9bcf1c7024af45be89caf8d9850dbf2f0bab515ca969adefa730cfc4fede69ca0e06a06af9946b801c9076024a01124","ssdeep":"96:q3CPv5GPS5N2KeQHiJwZEY6lmk5K2swP2H3kABSDNp:q3mMPS5N2KeQH8YEplOgALBop","tlshash":"f4919f833f3b7e0c663406d14629e013907cd0cd51e3e99c882727fca69ed13a082eca","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.121748Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1191,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Curve.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Curve.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:41 GMT\r\netag: \"9f29-69735d49-f45606b1b4f0645a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 40745\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"c4ca041eeaac5211ca2cdfaf5d3f1a80","sha1":"db4d235aba4a145594965069887566bfd26961ad","sha256":"35cbe9c99fa9be18f1f9b64e20d92c6cb325e7698751202cc6559d25ebc0c5e1","sha512":"7cb96682bee6e45b379ca527aadf22808cb2834398635f2895ee3996119e1fd6038e78e6142b7a85170ff559403901c2cb3380235ab68aa569a8ffaf99d00201","ssdeep":"768:+Fv2UHaRcf0fz0S0CVSbJU2ejKann4UMwaCUIkx+cPqIX5sXzhYNIS:+EU6cf0fYSoNU2CKa4UJaUk4cCpVYGS","tlshash":"5503f15631867e4b1b126582b8140ab5f94c5e3603f882f87cb6b4bce374bbc2d9d319","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-05-11T12:52:48.152798Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1264,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Torus.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Torus.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:24 GMT\r\netag: \"1014-69735d38-311cf7f601f22d53;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4116\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f98637446d8a69bfe1330d84ab956c57","sha1":"fe46f7ea18d550bcb9e40519c92a680914967692","sha256":"7155e585f5f698073cd2ef1e743145e35fe13d70c40420c6c4eb1a40939a6826","sha512":"e7da856ec84a1b350e96732b0275651d18064d76b183924db6044f8af6bcd1a16664cc77c789efa1e5d960df9c47312258821c9aa888c4b49d13da758dad0316","ssdeep":"96:iT/Yr/D9YscLoggggggggC9JHxQerAhM8khT7eIUN1gggggggggggggrFNZA0ggE:iT/4D9jm3jRzrAfpKNZANcAr","tlshash":"e481722741298992e47f0547f0df760aa41283942ff218c5b6a52c4fb5a821bdf1bceb","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.126719Z","times_seen":176,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1073,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Ton.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Ton.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:29 GMT\r\netag: \"9e9-69735d3d-5138ad830dadb40b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2537\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a1a54c584dd77fa14e3dd4b428d62d4d","sha1":"fbfbac145f955283907d9de32bb360f82c694e91","sha256":"8423799877499c7e91f8706588098113f52b2fc5ce8318f46de29c3e999cd772","sha512":"adfa5f3436abd67face4bf6938c1df83e19553d5cd6f8e32af6b626f5aeadb0816009d31e774fec83593ae01885f6936c82cd4f6ec692e80a8824e1d2529acea","ssdeep":"","tlshash":"9b513c53cbf4c9de6584020d3a557621ae134d2761ecf815db0547bf17ab5b702d214f","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.102133Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1066,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Sui.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Sui.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:38 GMT\r\netag: \"69e-69735d46-6d0d6b3061d771e7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1694\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 120, 8-bit colormap, non-interlaced","md5":"d3ca0c1d1eb1e75b7d4e706bae5c1465","sha1":"dcac668270551601c7521f8a04bfdb1e86d442a7","sha256":"80623a02ecb455e81c7fc78258ef915ef1d3ebcf2de1b28eaa4fc6078ee5d0b3","sha512":"211a3d2792a1c03304fc3e9b924d62a97f979f20a5255e415adc112a16a40cc3367afa1d23897e6d746d0724fe7ade19b884e308232febebf06c0b608b9442d9","ssdeep":"","tlshash":"7b3118f2225a40f0a5a49e272fb9236028255f918c70120ea3a3423265ee63c4072a61","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.11999Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1084,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Mantle.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Mantle.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:31 GMT\r\netag: \"bb7-69735d3f-b7a919d23e5be69e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2999\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"46dd609f9150881366d4d1e3576981af","sha1":"98bcad9ea4280477d1b3ca8d0ef893243f54a27e","sha256":"7d6b538643eaf77fad56d84d662b039d740f2cf212bbd0084efbe6c281435458","sha512":"71f9599586e7d86150a27ce9899389fedc45bb5b7225c558f93767fbe6a8d519b7e40c24086736472602cd89e831e8e06e4452992146c4c19865445c551acf50","ssdeep":"","tlshash":"67514c21c4d91e60480e2062868c98a7b8a6187fb47cd73df53539a8dfb0516456eff5","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.105018Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1216,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/TokenPocket.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/TokenPocket.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:43 GMT\r\netag: \"ebf-69735d4b-cd485001fb4fb5cb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3775\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"19b12702fd39253324ad06adbffe01c6","sha1":"88f94d953223ef516aeb7660b001e386b5a1e468","sha256":"0ddd0d230b780ef1095ff64ee475036ca5c76a7cd015198bf0d26a1b0d516c05","sha512":"219b4938d6b2d5aa307b1397a6e29ccefac6ca855429d773d15bd58e81278fb70517b286438a00ba5b1c9d7c7c02bd3764935f3130a036e2c4f3969988eb4a12","ssdeep":"","tlshash":"837171366ac16e3419ffb310d6d26a8154905e2f46bff2652355e242771b0ad01f0b9a","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.175045Z","times_seen":176,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1066,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swap.blockdag.network.collabscare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 15:26:35 GMT\r\nexpires: Wed, 10 Mar 2027 15:26:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 29511\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T21:14:38.461488Z","times_seen":206434,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":404,"dns":0,"connect":0,"send":0,"wait":83,"receive":18,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Binance_Web3_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Binance_Web3_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:31 GMT\r\netag: \"25cd-69735d3f-73ce782adaa4a8ca;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 9677\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a82884d5b8bcafb10a39853d3d453598","sha1":"a63f07f206c22a408627c05f90a926e5f0745132","sha256":"81053d21ba0331c8caded347e4aeb9795a45661c717f2a798e5dfc67add47ccb","sha512":"b7429b536e4c501ed1228fce5c0090451d6dce608d0f2baed2856cbebe29e06c2c7575d8a6f84b01bd1830dbacc829a68abe5723b372fb11039043a1313af37e","ssdeep":"192:DA4QG2/A2FAXN/Q8q4Lp+6xvE1nyFeKCrnO:DhQG2TAXXq4I6e1nfKCrO","tlshash":"5b129e8e405c6aebf4c212a9e5294a0bd98962843bc3059ef9dfc01c55437d3ff16a5b","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.14559Z","times_seen":28,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/js/script.js","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/js/script.js","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Phantom.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Phantom.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:24 GMT\r\netag: \"c515-69735d38-a39bd4683732037b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 50453\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"3f384b3bea69cd31b407da901df2678f","sha1":"a33a8b4cb7f3be090e6fede5f58a5a15695e708f","sha256":"af639e2fc10cfd9a51c10e12a56a2cdfca5b2017d57fc13e1b1c3e8d3518f31d","sha512":"6d954f01ee0be7582a3b57c5202ad7b608d95db55f42d8d01c8bf346fd79da97aca1ce2e18fea55e0a19a425a17764b314bb92535bc78dee786baa62808b66b6","ssdeep":"1536:762F8dGEn3ysQM7AFINd4zn6q4imiXQze:fYM+NOq9S","tlshash":"933302cdcc31f7050aa5ac2ae0e4471b2236b8bb8ed23714a8d52543e76f49730b029f","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.198786Z","times_seen":176,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Enjin_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Enjin_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:37 GMT\r\netag: \"1ca2-69735d45-9b66f0d1080c7b7a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7330\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a9e1f3ec3f13be7fa4082b211c7160c4","sha1":"ba56910eed99ae4fdf88abe9cdbe20c0d51d31ad","sha256":"6f77dad1781f56c53938ecb3515b8b7f8853807393ad8fee39662da15abf7717","sha512":"edb43d552b866402ac85870a430e92c2baba60bd16deb09ba5eb38ede505f31aabd6a5383d3538cc77a22bf11529443ba609766b80c0890c246756fd510e519f","ssdeep":"192:l5s7uUfEqiDHhwePviNJ1TAJJbiUd3IB8rwb:l5s7qqiDHhgEJb3IT","tlshash":"67e1adb41ffcb6cb7bad55a2ccc60b9cb910b255169a54efc4b0ebaaa4e125443017c3","first_seen":"2024-08-15T09:23:08Z","last_seen":"2026-05-11T12:52:48.095626Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1260,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Cardano.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Cardano.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:27 GMT\r\netag: \"93d-69735d3b-684970ea7b745380;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2365\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2365,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"4d61062124207380245d3320565dda51","sha1":"53b470f89c1f21228435e3539632a91a27673f5b","sha256":"51c2a451d750cac86611619d8d94f31dc5642e9ca2e28db437d574d62e53a88d","sha512":"ac17939fa43d8722ca1b4860e6825d4e4365d91bbbf3463d2a268746c9b7189b306ea74a0db57df6b325616fa0ea0a14df1d1e4c59445fc1388443ecb0b8579d","ssdeep":"","tlshash":"79415bc31db60098950283ba4abec63d31de39ec81b369001077d4a898ef5e0aff2133","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.156687Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1268,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/zypher.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/zypher.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:28 GMT\r\netag: \"129c-69735d3c-f6503078c34d2e0e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4764\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"3eb782f04c5560e5b90f94f233487d39","sha1":"112f25e3167bfa3403dc3d2f096bd61d6fcb8e1f","sha256":"805c08a1c1e756d4888bd5d7be4f78fe83085e7e9a246c4de2863c26560753a9","sha512":"19815827984ea5ac76b85bf73fd88f0f2ea196a90efae1efdd05ce55924f736896f5d580ba6d16aa911ca1bec591aa057e84d06bff09dae7ad714d9d9c10112c","ssdeep":"96:EgVCK9V+Buk0LD6Xom5OHmBDEXywQRaLHUeALjFqQghHm8f:Ev24uk0uoZHmpEXlQAL0ecQ7hxf","tlshash":"d5a14cc5b386516ccadf30b8cd12afee1c9829f5cc7ca6e994621096534bb6037b7208","first_seen":"2024-08-15T09:23:18Z","last_seen":"2026-05-11T12:52:48.155204Z","times_seen":26,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/ledger.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/ledger.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:30 GMT\r\netag: \"6cf-69735d3e-1ce79f3426958fac;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1743\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"6e85124bb4847bb90c01d6fa28c7f46b","sha1":"1acd9d71ed6ef1aa8d4af74534191428ec9c4401","sha256":"96c0884920358fb73406c67fb6efb2c932bf91cdcd565912f5881107a411675e","sha512":"c4f2104b8073798fb733da96423b91166418f83a3f6d56f9fb62fe70a31006a6c4752d543b04b16cbbbb16ca26fe4a198a2ad16e5c501bcc7eb3f95647b05f24","ssdeep":"","tlshash":"5631f862a4d068382ab5a88ba8c743fff44464f2ed6d11f1c464901da8c6a3df8c237c","first_seen":"2025-03-14T15:52:05.546458Z","last_seen":"2026-05-11T12:52:48.177298Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1254,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Fantom.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Fantom.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:29 GMT\r\netag: \"78a-69735d3d-5c2aaec81796e3f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1930\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"acef1564940a84b92d2a84302af9f579","sha1":"bd9b5557c9749870d2a33544deecb745d58a31cb","sha256":"e4a0aa6eb576510db9502e6e3d6877845fa31d380332a7a06f5861597307c598","sha512":"bc59f38c4575b05511e9be67d5189f97458b4e7b523c1f719c8732398ec4263ef464cc7f0ec30575a2e37e7c0a6d65533e42a7b1eb972249bcd5028bf966211b","ssdeep":"","tlshash":"9f410ae37da79c2c92cf1585c674e86761a00702201d4f88e65bd2b961fbaa1c178147","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.195522Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1256,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Doge_Coin.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Doge_Coin.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:34 GMT\r\netag: \"36ff-69735d42-95bf4dc53930b0ae;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 14079\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"278a9869826b2a4eaea431cdc6453b54","sha1":"bd594481f4b16629a8c64592d33ec958940497e0","sha256":"a9f5be31e69a51dcec3252921a5e79b57d891aaa1b062ba5e1795d91745c29da","sha512":"b286697c604a63ae173669d9d490e043c3ba275084218c38a5dfa51f03e28f1e6585848355bcc9dbee810c5dab2dfe203ddfa7c51f1e39837ca283e44b2463ce","ssdeep":"384:uJt9XdqUMjYnK2FjV4OiyaLwBGEKDQa4ORid2mmQgKL5tKrBT9:uKJK54VVQtOuf0D","tlshash":"8952d0ce3e4d5d3cfec01a252923dd58ad52c70c7a13ac9f961b80ed842d7352b425c1","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.110781Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1260,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Celo.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Celo.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:32 GMT\r\netag: \"83b-69735d40-e977ffbdcdb03a73;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2107\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"59d27569a39494b121a98abbba94a3d0","sha1":"399628e69e39c7eabf42e0fee32d01fdba08122e","sha256":"bdab56569d83556b558a130550deff7d4ea2d19140acdf0593e4f8929e3a1909","sha512":"8f9aeaea160e005e9f32f571b9f6f16f2767bcd52eb4eaa2250c18d4960509e8dd1a8c32a524396752035e5c76893f7229a0df871da45d36090f0e3b74c27228","ssdeep":"","tlshash":"9c414cdbddf438408438129de67f91642f250340b86c1f5e430b7e9a297309ec1c3168","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.15362Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1268,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Blockchain_com.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Blockchain_com.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:31 GMT\r\netag: \"129a-69735d3f-c180045d886c0452;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4762\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"978e1517e3f4d4a3f6839d92ccfa1719","sha1":"764e8371fe81f3e84032d0d7dd0a40740e07440d","sha256":"8cac4121d3bb0485cf593c136a20f16f799fedf8570dccb9a48ae6045be6fa24","sha512":"1ae42b1890be7a1768fbc2dd1686f070534056bef90257a1312190e506f2bc16b6c5385e61ac3544b0baf2e6b473cc710ff52b4a9770cb519a29ff20806ff20c","ssdeep":"96:OdDiGhgdA9+f7iZuP3mtzoR6MwbstdkD1B9/OdYDdBDI19K6shtXil:O5FgdA9yss3tR6MwWmD1OdYDdBDY9Whu","tlshash":"c5a14b780b23849af1df5f618887fbc4d40caa056d60d62b41ffb7959a2f10a32125bc","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.112429Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1268,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/images/photo_5791718503822855353_x-i6MASQfSvi4DE8iN83VGNkzLhwG6Nk.jpg","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /images/photo_5791718503822855353_x-i6MASQfSvi4DE8iN83VGNkzLhwG6Nk.jpg HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 05 Mar 2026 22:26:27 GMT\r\netag: \"31fa-69aa0313-218f096c7e85861b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12794\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"eb3d0bc5ca3b7a9318387d05a71f87db","sha1":"52ce523c1bbec91f8b7091315f4cb88fc37ae435","sha256":"12ab13acb8cda94fb27f7efd37d40cb5aca5414da7abba86d5572ba515b7996a","sha512":"579440da82faf95c234f4f9322ac2201025f9098e0d7ee5277d1f568cc8dd41c1d162563e92cffa9e4cda607635d0dc705f9d2f8e1a5a6ec10a76e3e86984dcc","ssdeep":"384:fo5AF5brcUyqj/PDsCc3FjjcCaL80eZKZcsl:fo2r0WzsCklc80V/","tlshash":"7542bfc91faa0dd2ca43e46d29ac58185af698a940c52cfb658738e7e5ce8c50834dc8","first_seen":"2026-03-10T23:38:53.521127Z","last_seen":"2026-04-18T20:11:21.999346Z","times_seen":4,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/images/solana.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /images/solana.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Mar 2026 22:26:27 GMT\r\netag: \"7be-69aa0313-59b165d22c936b87;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1982\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1982,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"ed0f805f62f1681482a839cc07d38c0f","sha1":"97965a61042e6ed11007ee1534df38f4682f0a23","sha256":"ab9cabfced6a03bd477b41ed8033a4d73d003ebcf8d9d49879fc9c99a51e9452","sha512":"b3941d41df2bbe7f0d0f67a139425d328d424cab27236011e5c8cb60955532d414d8d62b6880f310a1d2bf60b9de024c43d3206fed9a4adec8e02d3d1eb75b0d","ssdeep":"","tlshash":"46412a35e04bb540ec7175063a335a170ab3866842b4aa06a647e92b030fedf91673cb","first_seen":"2025-01-13T22:11:03.913878Z","last_seen":"2026-04-18T20:11:22.000589Z","times_seen":26,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/wallet-connect.svg","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/wallet-connect.svg HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 23 Jan 2026 11:36:23 GMT\r\netag: \"6bd-69735d37-e844e7428a37c9c7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 778\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1725,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2196b63ad9fe36e1f89d615df0c1b744","sha1":"ca97ee69ccebc12f9c7cc4d1d2a70c5bf8f5e8f9","sha256":"73bc498be99dc6cf3ff3e0fb5379dfaa7269e46bb4948624ef1db9e3ce0cd0e2","sha512":"9ae6fefec5385479fc18534718b25e3ba84c72f157d581e42afc331511d9cf984015bef56df9adaee8372bb6a5209b529fcb3ea061b14cddc97f26ec8e4fd64e","ssdeep":"","tlshash":"8a3132f667e4f2a4f189e3b8e91fec25b46b22727615ca8d53c0af58a85347c148c5c4","first_seen":"2023-04-12T20:55:47Z","last_seen":"2026-05-28T13:58:04.774987Z","times_seen":86,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Ledger_Live.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Ledger_Live.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:25 GMT\r\netag: \"e91-69735d39-6340e5e9f1045a7c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3729\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b13d91aca76207a56af48dffcad445cd","sha1":"86d943d74726c4ca895fcd99d0fb9cfa2c49d9ca","sha256":"00c64ec3a9d062acd60fa139fcc3920e93cbfca38848db9cd3e10995e3b80e72","sha512":"74c5af524b6b9da854a2e076daa61679c06bff813436e75828405a02d046bb6010b1046bdc385a3dde995c7d5dde357bc16940d531f87f2b402a30e236e4dbf7","ssdeep":"","tlshash":"957162b3206dd086c16f5172b018765eb190c7944bf24e54eab5382361a8b6acf13dff","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.154404Z","times_seen":177,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":907,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/trezor.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/trezor.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:24 GMT\r\netag: \"dcec-69735d38-4e7184243ae1b0ce;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 56556\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ae75990eaadf3a93679bec91c1925adb","sha1":"26a3bb2ef44fbf3051fd7fd5308c0a2336f7fad6","sha256":"3722b5930791a5157b2a32636837d698cb0d2084bd2188a09bd6dbe7ece30f2e","sha512":"d6bfe5bfb433591fdf2ef759825dd15c8e082cbbc4ddec29450672010989c97aa9923d5a390d025fe0a8e0868c1977c9f804bb43ab03f25cb5c6aef15370ea10","ssdeep":"768:LwKYkdcpqcAJY8sv4JBr4xwLpWw3WJe5pOOdBVoFtJqAf6PM4qozt1JwV/KvrgCu:cKYIC/OPsvkAw3WJqOEBVsO5b14kkeA","tlshash":"ee43f14f6e06e278c425eb631f5f3afca5ad4c1f358a2a1128694f350d368e41b132e3","first_seen":"2025-04-23T12:59:07.969582Z","last_seen":"2026-05-11T12:52:48.199343Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1030,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Tidus_Wallet_.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Tidus_Wallet_.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:40 GMT\r\netag: \"3964-69735d48-3e7ec54fe0e3ac72;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 14692\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9f441aa11534e60c4f37bbae89b074a1","sha1":"804ac80f384f51ca52c95df004bc2076438efc0d","sha256":"879c3c6b260bfe92e960cf942bb6aab3358ac0823d5771f369c019500df640cf","sha512":"2257c164dfeac79f69ae533792b82955c29c4aff48414d33ba536ff7205ae0633f53ff301108ed64ec93b9ffc5966e0726fec2abba72a4bbd1b0da15c54d60a9","ssdeep":"384:7bFkZ5EfKNhoFtMCuR3L6yuN2RUi/CWmBAyVryYHD:7aZ2fuhoYFLDRUivmBAyV/HD","tlshash":"3362d09c0056aefe739c4551b38a46da0bd058bd358df312745806bc4a281edf7ccec2","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-05-11T12:52:48.196644Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1066,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Tholos.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Tholos.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:29 GMT\r\netag: \"1ea3-69735d3d-906e745f48ceb09e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7843\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"963e5756730e96fe22b4882ca278e4a9","sha1":"ed1bcf1defcd6f8ae29ebc19d230146d5bb03fbd","sha256":"d9d5e6e9a48b4fb9276ecf22bd79b7445b73ebc4f77d4d1ff5d876bebd6c9d9c","sha512":"7297ce5c72cf471bb08b1b990d168476428d7d85637f7777a1147bb5537ff1c1187a0a8b5c4b1b7129a2b711817487a0d20f2a502efb1f611ee87f15fde742be","ssdeep":"192:yAJOuRq25T/QH+NjuLDXCBy1e1ot98HQSpDtKZo:yQbw2tpqLmBy1eAuDUO","tlshash":"15f19fedd1a3b26044a7006048bd5989def7e72974a7056a0646f52fcaa73ca8c87913","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.148701Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1065,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Spot.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Spot.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:44 GMT\r\netag: \"8ab6-69735d4c-34cda9154add4bf6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 35510\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"9baeb9daa6f84917b1cae217c6639dd7","sha1":"6b119775f19126a2cff15d857d99e3cb6cc4cb37","sha256":"7100f0f91718ee42253ffc87306deb08e299c1d1825ea436c22f324889a18691","sha512":"31fe60edde8fb924eabbc555e98bf66dfc44ed6a157fd3e4b902f9f23467d21086f33be1f54a5894c69635c72ef921017a482816d06e576e3b43c5960dbcede1","ssdeep":"768:D8OuS+qqTMhvDFG/U+mlwCYPDCWRo+XGJ9N78nXTLGwBF:f6GL8/UH3YPD5pWJ9N8nHv","tlshash":"f7f2f2129022e759636768726f082ffb56690db9f0c8744ce69f345b0cc977a620fc5c","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.137167Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1177,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/images/usdc.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /images/usdc.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Mar 2026 22:26:27 GMT\r\netag: \"ab2-69aa0313-28411d3b3887c6be;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2738\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2738,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"1cf16109ad27d4ba391fa719fde189fb","sha1":"d3f964256556112557815eefae225aab145cddb8","sha256":"f05463bd75c217cdf73ddf148671fd8fd36922a2089f24006bc035b1417bfde0","sha512":"7d0e466888a1a3d5b258918c2d66714d22ef44235ae8f2b9767490ced62ea7d5b0c42d70d6b2a53a05fa750fdb10d3a6c3f66cc77ba0629b7e012c2151176b06","ssdeep":"","tlshash":"ab516cee6e147c465b20f0f73374c306c3ca8643b361a202ec456c4916b715696e76c8","first_seen":"2025-02-11T12:35:52.342669Z","last_seen":"2026-04-18T20:11:22.004646Z","times_seen":16,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Safe.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Safe.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:43 GMT\r\netag: \"e72-69735d4b-b293a78f20aca419;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3698\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"e31561dfb6e06b0301e56757f3bf3fd2","sha1":"f48562f8defb8e178f32456d639e198038041069","sha256":"00ec37abb69628fefb003769405e9859917fdd41561e856e5c115fd070332200","sha512":"93ff08ce67db98211c5f75abcb204769e173c4effb5191e34dda09b421eeeb7cc354e31aec5e4b61929d526d4a4dec0827c03867013dd2488cc486e524e215e1","ssdeep":"","tlshash":"4871837269641b325dfeb754ca824ad454890e6f10aff7113368f303268b2b996e42de","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.160198Z","times_seen":28,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Wallacy.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Wallacy.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:36 GMT\r\netag: \"3009-69735d44-d6c642d1807c6154;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12297\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0e311733b57816a9a009abde05eba674","sha1":"e2c98071fa7b835b77d915b8956280ab12663594","sha256":"a12218e1d9b2469b023cd603ab2d52e0e646dae20eddcd46d0b6504be6bae1f7","sha512":"98de551ed312e17ca4b4bc2b9675f992dfb1d2733f56349487c95f856fd7a0ae5323bef810a985a6dbe63e15471124a2ddfcda715401882e50b3f739c86e6693","ssdeep":"192:KZVlrriwghuLZxx8fkY5ODPJg3vF/jXYJVjGIu90ObCarzT0dmp1:YXd9xevUxg5bapxqC8H0M","tlshash":"a242b0a6fc455f22eb987c77ce15c8b21c0b683a2a46de78f5c1536c58b4b014f29ac3","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-05-11T12:52:48.17346Z","times_seen":27,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":989,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/VeChain.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/VeChain.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:35 GMT\r\netag: \"59c-69735d43-c884f7b7b661b690;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1436\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"46dcb29cd8619306c26cea1bf1173506","sha1":"c01ba6fbedffcc7c1bc78d326c2f95407b9c0606","sha256":"9bbe417f2feb29f61e10b6b27b32d9ca7fd26383d8eed4d29b03afe00c3798a1","sha512":"1792950553e466354ce3f38bc174eb9720dbc7fb4dad995cbafb4264bee7957e4827e4f1356eb63fea8a425b733084ac119a528c6274d5ae19ed92e8f699c858","ssdeep":"","tlshash":"f221d8e0cf6699f8abfb492949a8885ad24c7c3d3495433888f875010b7761fc259868","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.119156Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1034,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Toric_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Toric_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:31 GMT\r\netag: \"3641-69735d3f-1a7feb282a99f813;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13889\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13889,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f3b724a0890571bf198afe4f8ce25af2","sha1":"d95f99be23ca3a0fd9c1b629a049bc0e81b1d7d0","sha256":"d1aa69967b18c4171e0659a5ddc14360503966fbd0c4e3cf09b13f892df8a11a","sha512":"3870ec2b65883224f03c651bcadd2d1ef643c8566b6735293855bebe72c55f1f69d22a40d2361d198d796a704d8a8c505a04dce5ccfb92e52daedaac1a04f81e","ssdeep":"384:bTamgXCILXhHjioLsuQpUzS6GplqmXweFc+OQeGh:bYXhXNQ6FGjqmXVJR","tlshash":"c552cf7ab9b4fa00a073c9e1d3cb951e1f9496dbac4a424cdace0073429c13766ea4c7","first_seen":"2024-08-15T09:23:12Z","last_seen":"2026-05-11T12:52:48.127662Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1068,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Gnosis.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Gnosis.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:25 GMT\r\netag: \"816-69735d39-3ea371c7104a584a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2070\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"d6292641e03ed065eab7cff775640fa4","sha1":"05204f8388296563a26b2393d3838dbe424d8ffd","sha256":"a5859a3a0e4abc4b00c66641ec343620914b1f9e05e04e90cde640a6a6354935","sha512":"7bd4c920d9921c6d7f0986beaace2951d42ca3957a6ec26b160661da045804f30655c7c2dd1dc2b7c6ef25868f244e19e9a1c072f3fbfd21cb21dff0bbdbe9ba","ssdeep":"","tlshash":"8a41f89339487ef35e165232b976c171c988e26af03348b589aa522c63403613fbb11c","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.19492Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1261,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Zerion.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Zerion.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:35 GMT\r\netag: \"afc-69735d43-34f437cd8208df;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2812\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"60f10e27099d6f46c78c10e031d1dc01","sha1":"d0b8d22813830a57ac138d5e1c8cdbfcca18eb10","sha256":"567d85284e3461f43a8c1b26f0c5971c8601de1ebaf945bd7d5d7a5baa79660a","sha512":"dc88134345bbb0361412e66e89a052c1b3a60ebd84dc512231edaa2e601428b5b3a90e0fef86f0bcb1c60ee8f9e5295707211d8e5ba897c9fecfe5cd46e1ceef","ssdeep":"","tlshash":"ca512cd7b91dda2fe003243110e5d397cd2b636bb2047f210d5a6501794a2698e001fd","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.187607Z","times_seen":28,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Mar 2026 23:38:25 GMT\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b8d3b4b9d4ee8cae44e2afcef48e7a93","sha1":"ea3c361f22fa31fb8612dd2ca30f1ac7ba03f75b","sha256":"7c966efd5a04f87920e8cef5c332c73b0d529b21c46fa312ff0020047d882c35","sha512":"7418cc24da4237fed57bbd3e92618985c30c29ab320908f146d0fe954c6a49e179007537480bfc7f2bf76e76a47da055c6cb6fb2744991e0c3a471c88fc06f08","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3L+:vXuM0p2+g7GQK","tlshash":"c2628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T12:17:30.699497Z","last_seen":"2026-06-08T21:15:03.028801Z","times_seen":2411,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":236,"dns":1,"connect":27,"send":0,"wait":49,"receive":0,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Uniswap_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Uniswap_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:36 GMT\r\netag: \"c158-69735d44-ec6f7be825248e9a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 49496\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"92b6fd2b73507f6e8bc7c0cf734fee81","sha1":"f5876aa99a6f4c43a8fc9a5ef07390fc0bda4fea","sha256":"bfbc39e657559095e09a2fcc1e734cc2971439b5f9622379e227bbe526744d6d","sha512":"8c8b0876287d23822f6c5e5abef6c8ad14f6747da16a58b2e8100bcc94e7797594cba92e955e8557f0eb9417223749953dc62fc130f44c5d31fe93b7e3525da8","ssdeep":"768:ubOZ1p+qYIjrcMtQvWTvi8mVRejEt0CesFY5DsK22asxQhofycCHWGkFSmVFrGO1:ubOZKq9lQeTvWl0CesFUsKNtxQhGOURZ","tlshash":"7523f1d8b68d46325b146528c6b3f1e2cda3457bf01cbe8c5b1c0674fea49e30a61a78","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.188737Z","times_seen":28,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/sablier_v2_interfaces.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/sablier_v2_interfaces.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:23 GMT\r\netag: \"2ba8-69735d37-581633b64dd89f2f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 11176\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"853c78165b7ab0c88aa9e35ee163a502","sha1":"2e37225e103a677c6ebd499982b8e258391c4ca3","sha256":"4ac900b937064ce539d79b4a2fee8093a35b766cceda7f5d22625c4615c4b6a7","sha512":"4777aecf98d28cc2824ac6c6e9d5fb8ac30cfd515dc1fa19bfde47463c92b7c529a6f287435db47b2915ee82cb1c4d05c6416e8e71d5f438a63d07cb996cb729","ssdeep":"192:lJu5/kEX9UYeV7ib2ZPUInXRV+Fij4zteP0Zq9om5xdmN7cYaIIMCzLa0tBZ4azx:lu/kbV7ibKPnKDztePyq9b7WYYgam8Sx","tlshash":"4b32d0e4f8a478d3856714a9e1d042737bb7703864857f42868c0e736693e9a1dc49b7","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-05-11T12:52:48.178802Z","times_seen":26,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Tron.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Tron.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:23 GMT\r\netag: \"984-69735d37-f2d980c7f23f9e6e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2436\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"ecc968fca12dd3be764a1a090e44b53a","sha1":"385af331fbe3ba4d58caa9b9fb7f31fc1782532e","sha256":"abf2015e572d5a410e9bbec8a3fdf3983d830192abdbe7b436de2fe1de313464","sha512":"900be2b806e7c452ce59bcc866d15b3f4c9ed6edf47f3dd3adad6ab6b33d5c2fc0a13cb495a14874303fe84d3daea457ebf35396f36ca5a5b4dfdf9aab17cdb0","ssdeep":"","tlshash":"b4415b37c520ac54af7a77bed0eeb1140da0878cf4ae4da77734705d9f24051b189b15","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.174261Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Linear.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Linear.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:29 GMT\r\netag: \"469-69735d3d-1b44955b7385616f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1129\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"7b9f6121675c9c12919983d167dea2bb","sha1":"38b3ae0dbeabea49768587b787eb8bcadc57a26a","sha256":"6869960617bd8b27f2553d3a5282245c285d0db13efa1e90c690de9601f75054","sha512":"19f33504b760fa1ac1fc1a63af48eba749217f069a80ea411259b2db9f0ac08afb4fc988d6b035911503866ed48d909dcc894a6b7b9b0c396231b6306efe833e","ssdeep":"","tlshash":"5c21932099b14ea6cc78e82775142192eb82d5b4c3aeab85a0f0152177e5f3cd0e1ec8","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.179603Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/KLAY.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/KLAY.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"bce-69735d3a-9161b51e91a9fb72;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3022\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"6afb14555c75b83960b97462a335e4f6","sha1":"2d26daa9022187de26d309c3d570e7131558037a","sha256":"d9ff4dc458a42e6fde123f1f21ae3a79e56b7017f379e5888cc463b428a50127","sha512":"b3e45f76ac0b6fd846584a7b415146a0f68c5338dd0e4b6e76b57f86724a1bc1c8a711d2871006ddad72ba1158aa55c108a4ded7c9318fe2d27c069abce0a80e","ssdeep":"","tlshash":"72516ee552b110d9bdef68aa15ce1321c2ae8fff65808887d2f1c9babbc5544433184a","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.10627Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1262,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/other-wallet.svg","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/other-wallet.svg HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 23 Jan 2026 11:36:23 GMT\r\netag: \"387-69735d37-3ec4ae8f8455765d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 495\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc4e49ff854cfeafc9d15b9372a069a9","sha1":"3bdfd4e1e13ea974024153abe6c5530cd6a86758","sha256":"6c0a2399d5f06e7f5834267a8805c79059ef11e360343171affd1f1a796293fc","sha512":"7762c126c8b3e10e544cd49444c26b653cf14b8a67961a4ec528a1c78adff0c66774044f209cb245d5348a7cfcc82d1426089f478364bf41497b6b4c618ce997","ssdeep":"","tlshash":"0911b1ac4800517cd6e517c017adf2c9927ef21f01d62866168c2ec54f08e2ed6e6710","first_seen":"2025-10-21T08:18:50.113373Z","last_seen":"2026-05-11T12:52:48.135315Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/css/modal.css","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /css/modal.css HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Tue, 10 Mar 2026 23:38:25 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/wallet-connect.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/wallet-connect.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:40 GMT\r\netag: \"a3f-69735d48-1eb131763e945298;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2623\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit colormap, non-interlaced","md5":"7da878045093e1dc3035c2fa0cfc321f","sha1":"7d77da9ba8208570c1426fac4d4559be7904d74d","sha256":"cd4a18f4fe8c5a0116c638475aa8b09935a9f254d7c1abd31345f3f0d93d7bb6","sha512":"6a0322cdfb916113f2bef4b9bac36abd61a35eeece07d459ef8204d4eac0e5dfe4ddac109ddc17a17de965cb3b86ff947563479b6e69b2b4c009c527e1bb9cb5","ssdeep":"","tlshash":"50513cc13434e4594a547875a690acc06c331efd6a6fe58788cd3a1a9ef3addacc4f00","first_seen":"2023-07-22T21:20:47Z","last_seen":"2026-05-11T12:52:48.09428Z","times_seen":17,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Zapper.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Zapper.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:37 GMT\r\netag: \"921-69735d45-9c0ee0a8d7e96d92;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2337\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"8104be239c8d499da406256d6d133882","sha1":"3eed189b2449a72b69407e94767dba97315997b7","sha256":"d6d70935e692ed0f4792048805850ea2ffe51e8caf38f4ec2461d63320f09cdd","sha512":"b6dc85ed1825638812ccd48e23a1cbbf9fbef0e6986f34186b0221054a88809964cb0a044e993e45b28494c9eb378797d1994224af122e31402d668f58d7d88d","ssdeep":"","tlshash":"72415bc44230c985ddd212b0bcdeab80c1ea655275f1b608bbd910701c6c26994932ba","first_seen":"2024-08-15T09:23:13Z","last_seen":"2026-05-11T12:52:48.190743Z","times_seen":27,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":930,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Cronos.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Cronos.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:25 GMT\r\netag: \"6ea-69735d39-3baf66b7d397abe0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1770\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"aa4fa158e10d665536c930c083c9f713","sha1":"2cb748c6e9acea781a299b67c54d5645544b1077","sha256":"78c97e5f65f412ddae1b41ad8acc2a402a1e580f4ba985a5fcc17cc6b6785a93","sha512":"64f16fa880dfb8d01bdfc6a4ed5a2cafc5ab460be8c730eb78431951a407782620b2e80ea1e059e62034fd66ee77f48d00c248a1933b36b97633e58294d67d5b","ssdeep":"","tlshash":"1a3129da98a7247f8780e23ec2d6c4186c162d335de3b648f0d0b712831a0d68bc1c0e","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.133596Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1272,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Base.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Base.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:29 GMT\r\netag: \"ba5-69735d3d-afe7f8eb8d2f924;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2981\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"b6588f0ebef9e51a005eac6eca9f2ba6","sha1":"fe4452853f0ba67c588fced9c1bd71bc71f2f634","sha256":"39cc19e3d6b0d1173c8e67704b8f47b69a048ee200b6077d3eafb5e6eb816007","sha512":"b9294577c922625ebf8b6eb698b2d4a9f8def49a0218d4214f18f43e3260712cd32c6c84a56f7c8e6ed238caa877c1d5f6a5bb985c73ebd8bf9a2bd1ba20a3cb","ssdeep":"","tlshash":"8c516d047ad5bd214b893e40d920c33f3f8a55048d3b72943df766f9e6463ac6a40166","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.181744Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1265,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Coinbase_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Coinbase_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"70b5-69735d3a-6f9c090da9577eae;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 28853\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"dadf7348d316de30940e2df53ef7b9dd","sha1":"5314e6750935c37261b6067626259d0178999262","sha256":"92c25d2f2fa086804791debc19d569c25f5d6871e750a3379c72cd287d45b7c2","sha512":"fb49ae8e53ac88a50d85503a3d512002082ef48a40f764d453dc935f46964c0ffd7721e7ff4673457b3a9316122738d0dd63b1ed7187628d189d36ac1ef2a8fb","ssdeep":"768:rhSjVpFClxno3yfmlMokejeCbmiuAIiupXXMU:rkjzY7mlJkUbkjdXMU","tlshash":"26d2e0e33f6e6501a439057cea6a02f6495fa376bc5fafcbb49d88db2045e0496c401b","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.144467Z","times_seen":177,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Yearn.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Yearn.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:33 GMT\r\netag: \"2518-69735d41-69fb21b6ec57e3e1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 9496\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit grayscale, non-interlaced","md5":"d92669b62c8baef4990dfd6669a5720f","sha1":"01c7356d1cc3df3398f2150514a7aec77f5f0d98","sha256":"0778eba6539d0b324978eb4b9838345c641dfc01dc34ec4506e29ccff54fc115","sha512":"00bf9317ab5ed7e68c50328b4a053d4a068f9989f066e87e0d57fc974555b03f0dd1fabfb6641562f385590010501710791be8dc143bca32192f3536dde34e8d","ssdeep":"192:UeEIScQPnJUaa0oPUDLuoTUPGSCxr+X91daIeJcFrVTw:U5I0JUN8nunGdR+XZZeir2","tlshash":"8c129e7e9e6c9c2f8c3802679d7e7d9d0f371babe227a445d98248336a64cd8d052841","first_seen":"2024-08-15T09:23:14Z","last_seen":"2026-05-11T12:52:48.165051Z","times_seen":27,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":932,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Verso.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Verso.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:25 GMT\r\netag: \"132f-69735d39-20f305ddb326c3e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4911\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"219e886ea8b819a7ad0a57817d70b9f7","sha1":"750492fb080dcd08aee53ef745ce1455d01a2cb5","sha256":"6f2c7fe87d00e01b5edccb7a5230a0bd0ded79cc5179f610944d03bffafd8add","sha512":"270b68cdc8a192296e21868f7131a80fa9ed7cf1e5370e484d9c18617767439b27355a3678703cdb6624c8eea973a8b3b06d134dfabf9c981cac61e750c9d2fd","ssdeep":"96:cZXGc+asP11CMr0iJEBv7oMLw/8c27zLRvsJatT/aeC53WoPljvcUqf5W:csXaSLCMrrJEBv7oMk/8cgxkori3Zjca","tlshash":"83a18ec043412ff6fd1e7d71512bc19974721e2571b8cc98f60034aca8737a5a81dac9","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.19717Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1019,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Talk_.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Talk_.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:26 GMT\r\netag: \"2be9-69735d3a-93adee9b69c48605;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 11241\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"b6d958c62337f1a9fab845aab98ff724","sha1":"035517c431bdb5f30bccc477c9aba5875ea2e2ce","sha256":"7f56df23f405f8a39d39e702f4698b18c8bd6ac798d519dbf549d1c0dc4673b2","sha512":"027e81c9b409d61f74993958379da3a6f9409d5885d1f838424ef45a7940cdffed88f7057da2a6be8c65990f8305bfbce891a3e1a4380ab3ae660e3177bbf388","ssdeep":"192:dw5rQO70eY72fNX1v53Mo0NicaSq7vtxBfxz/lEBmwWFrSLa1PuLRK:UrQcD5ENUxBRGBOtSLwuo","tlshash":"8d32b0e9eed04ecdd30a15bb4c02e717bc60c336908e9071268a50bc19915587adfbae","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.158112Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1083,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Stellar.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Stellar.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:32 GMT\r\netag: \"1854-69735d40-66e94f6ebe2685d2;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 6228\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"65916b9986cd53d5036976b5bd1c9c7a","sha1":"d61ce2f66fc60fec76079868b95939c2bd58cbd6","sha256":"46a6913ccb57513465cbadadf7e62c18e95e3c8203e1e627f6bde6efb44403fe","sha512":"94e2244d6200dc0b7ae47716f19693a8145f1ad06130a8f93ec877b10b458a86a137dc792b495126e581bcfc80ffa72c02b836ba53f7252fead341db773c6166","ssdeep":"192:3vaRQi/PDN5nVnGrAk8z+0OlpteSAL/4O+l5:3KQmBVVnQF8zuML/5E5","tlshash":"fed19fa7ac61d840e10923a0304899ed78ff6a5c18723718fae65729632fc79f8c551d","first_seen":"2024-08-15T09:23:20Z","last_seen":"2026-05-11T12:52:48.165781Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1175,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Rainbow.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Rainbow.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:39 GMT\r\netag: \"4b30-69735d47-c60bb82daf23d99c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 19248\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"817f560ec788dbf4e103990bca918e19","sha1":"318cdc608d82666406d8b52dab618685abd1d0ed","sha256":"1b22f86c209e9db5c83f6aaa9b641829096d3d9af6e842f66009a98712add4b1","sha512":"f509021c11f665b023605c03e67bb2b42a7d39a593deb152596079d3a00d1e7b0a36aa29820c21be9047f074419055578ff46ab7c2de86974eda59e51c556f6f","ssdeep":"384:MNahirHY1I51gxzmwRWWOFVD1oYk16eoAPcv5czlRZtM4QAIc5Uwj4n:oaQbYqwRWZFVDtuoADNG4QJmUwcn","tlshash":"7882e1b4c8f81eac867de270c698704eb7546acc4df2cbe4f5d6ab5c0528a70813a749","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-05-11T12:52:48.194349Z","times_seen":176,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1185,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Plasma_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Plasma_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:28 GMT\r\netag: \"49e7-69735d3c-96992b44c76c7338;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 18919\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18919,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"50bd72644fb124f9edd9ecfdf9f066ee","sha1":"9d6646dc0a317647ca4d1a208f5758de722ef69a","sha256":"2333c2b49960d939f039592ee3e1e0a05f7b5f03aee3a2f48a69cce5a906f77a","sha512":"619d2b59070bd043c874dbfbf5626938aeb6c42aef157c0c9b8d85a91b013476d3a3df83e0e73370e6b9c316e481c5225e977b54c44fe72130eda3bdf02db295","ssdeep":"384:0JmsrJZfaiY40V4mZDI/tJZ1IW5zvDMk+AnD1zRRgIS:0JtXfjLZmZ2DIGzvDd+CB/u","tlshash":"4c82d0910755de3be85ea1b08b0af9df0eb9b77b40f4a4d21344b187899b918d0cb335","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.124133Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1191,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=ethereum,solana,usd-coin,tether\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=ethereum,solana,usd-coin,tether\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nOrigin: https://swap.blockdag.network.collabscare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"1fdcd26629fc0a1d8b11fa4ed59bf0cb\"\r\nx-request-id: fe68fb6d-6bfe-4f6c-8b5f-71119d833b88\r\nx-runtime: 0.005528\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: HIT\r\ncf-ray: 9da627286e96c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"242bc584bc4abf74136f04ed41096274","sha1":"af8e45b2e34f17c65a7382cd83531c51cf18f20c","sha256":"2e39fbcb4c9c57ad3ce17f6014fc36ba046e3a359b949537b65964f4e4360ed5","sha512":"f666bc9f7a5f0fba46be3f2627f7dbf68ffde636c1bab50256b2a45520c1d88f5f09db1dc6b9abe387c107e4d4ac3409f862f09794787642dc4ca6aa1899a0e2","ssdeep":"","tlshash":"6db0120858b318f71e0c4d390c143350f6470735082d0308604de4820c4f3df20410f0","first_seen":"2026-03-10T23:38:53.550767Z","last_seen":"2026-03-10T23:38:53.550767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":19,"dns":6,"connect":1,"send":0,"wait":128,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:25.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swap.blockdag.network.collabscare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 15:26:35 GMT\r\nexpires: Wed, 10 Mar 2027 15:26:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 29511\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T21:14:38.461488Z","times_seen":206434,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":405,"dns":2,"connect":44,"send":0,"wait":59,"receive":25,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/safepal.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/safepal.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:41 GMT\r\netag: \"5dc-69735d49-e47f9963d8b7be11;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1500\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2f3619add0651f89d2cc4c280266c819","sha1":"f11c8878039e96ff241bed5425c0a1c350f0defc","sha256":"da6e928573af6c9790bcd7827f800c8e01235f85a09f115ea02beaebf742440c","sha512":"a2a161d7725ae56404ee9a4c98f93338051700a1a1910e80c25a99d0a31927bc51e0ba0d68dd76b02f4c0146bbebf4c71dd0c729b1bb6585092f5cacb80de808","ssdeep":"","tlshash":"13313dde474757a4cbeea075429ac9bb3a3b09603c250856df2caec3cd7864363310d4","first_seen":"2024-08-20T02:25:21.683425Z","last_seen":"2026-05-11T12:52:48.168802Z","times_seen":23,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Tangem_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Tangem_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:25 GMT\r\netag: \"9ac-69735d39-737d6e1f3dc37d7a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2476\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"a150deecaa493a6db516910b39663a7d","sha1":"2f58c403c55755533f5626c388398543e4f7c41f","sha256":"f4e5eb096062797f8f0953f3b5a7e99c433a5a27d6e8d6686940b52a3ba18e83","sha512":"8b58172f7163e4c753912b5acda082fa3e7b16c808194690e1d8ed25a9b0dce324d24dc6445a4f8b5b7d1dda1bc9326d574c05da5a6ff63ddac6f8b819008df9","ssdeep":"","tlshash":"2651a8cf0605f62327436649cf226360e27b7b1ee6c3c985624b60ee853d8853887bc9","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-05-11T12:52:48.13006Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1080,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Metis.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Metis.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:28 GMT\r\netag: \"d24-69735d3c-a551b42ea3a3323e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3364\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c9e32a50dbfc6bcbdb52ce354ae10735","sha1":"cb5bcbcb1a0e6a49f1a221e25bd2d7a3fdf5b045","sha256":"3bdafd98b5aedcf75a72c3f5a1b4c64ae415a261d2c613181d490c02faa96849","sha512":"d4a59ed374799462e9a848bd82ffeefecd491317b8a52338ab5b6d98cc34463be19e83920a20903d344a2c5dc6441b2ffe615e8e76295e97661e6eb38502f6ac","ssdeep":"","tlshash":"c4614b08a275dd70caa239e373034b99d560db135fa7e82346edbbb378e287c69c4154","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.191455Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1217,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/KyberSwap.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/KyberSwap.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:41 GMT\r\netag: \"a160-69735d49-c128ce641bf76329;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 41312\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"a0e2b129906df80bc92843a07196da10","sha1":"a7af8f73c79a31ec344c70a06bd96fe842503988","sha256":"ea444bd95cc603929de620440518da1cf8f0be14aa296bba517f0e3f96e7322e","sha512":"32af5a7b46051bf29424fbc1feea045c735bc367a7dfb178efe58f19c1c8b865c9a1e78e07501ba7ce3bc38386b51fa0163c0fd269d230cc772a3163c1ecb474","ssdeep":"768:yV8N9UqF+LB7DXruvCqCVAdUzjXe3w2LPVLNZgxqb3YIrLyoLhlHFujK:E8eLByCVZjWrnLvFX","tlshash":"3403f16bddf0fe4a6411c8c44f91188d763c3eae70fa7853db623ad2c01da6a469b914","first_seen":"2024-08-15T09:23:19Z","last_seen":"2026-05-11T12:52:48.1609Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1251,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Flare.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Flare.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:40 GMT\r\netag: \"4d2-69735d48-2a4588127e01a3a1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1234\r\ndate: Tue, 10 Mar 2026 23:38:27 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c69d0ae55d62e6ff443ccd206c240d20","sha1":"76b5d6c2a20b7450fe5812da71c675ab74ba2621","sha256":"e9acc1dfafed3eb9f5f5e49b177b40d065a3255136fd1481f635812bb38e7582","sha512":"30487dfb671dc2931c6a2b0f2d6284e26b9ebe03ed3de910ad3b17ea7700a3e122f38a4cbf236259aea3d8644f840d3ed25cd1fb9d66c4ae1b32cd210ab8ebdf","ssdeep":"","tlshash":"3621e71b778f036600f16d1bb7a8b8a08e9a479c82fb02917d5a51002c4ca390ff34e4","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.124973Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1258,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Bybit_Wallet.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Bybit_Wallet.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:37 GMT\r\netag: \"279e-69735d45-8bf76639f2fc3c54;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 10142\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"f24940fd9b53176085b887f31655d638","sha1":"83872580bc82a51adb63cf1eed4c20be18f8477f","sha256":"ff4f5566dbb4ca37f03810c05919a36ce02f52b194e2f379fa8f9ae089b09886","sha512":"5901fbc01b04e7c97a5be298b0258270055a658c5c0cb0d8e3b6cfcd142926be9c4c65ecc8ecc3195fcc1f52e3a72a7f533b8b79b97fb9393f4dd6d3f879f96a","ssdeep":"192:2Qyh4vksTGIf8p6xJOev0VoJMiU4Mv/f23MOKT81kwnnwpy6szhDFSiHcEoG:2H8nGIUs/vHJPuv23tKT81kwnn+nyFSk","tlshash":"0422bf6c7b79b0065f452dd7a11c6a1ce96f7f189b8cf6cd3180bda85e703d842119c9","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-05-11T12:52:48.146704Z","times_seen":28,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":910,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Xellar.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Xellar.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:24 GMT\r\netag: \"c412-69735d38-709346448ff3a8e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 50194\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"6da82db509bd72c2dea8ceb535e0fd8c","sha1":"c1c28f2b4d6e1758bbeb19ac83ce6dafa10696cf","sha256":"845ecf8a779990f0dc41e8f0a6466b6f765f6e3fab87329b1b1e88ec8867d63e","sha512":"75985695348960e9cb6ebc483a8a83fb863475f489d43c6a160d8aada654f8b38529ad9abe2947b4703a5869684d1210b94f30b49c4ba4e3a386d4883f9b496a","ssdeep":"1536:6EyQvLpSU/7Q/NE3WpFVVFEbc5M4/CsK7gXovE:6928U/0/AWfVVqYe4/ZK7g4M","tlshash":"f03302d5427613f334a2cd5ca10f2625c466047a1e878dbcd639b6410a79bf4a6f3f36","first_seen":"2024-08-15T09:23:10Z","last_seen":"2026-05-11T12:52:48.147786Z","times_seen":28,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Volt_DeFi.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Volt_DeFi.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:29 GMT\r\netag: \"67d2-69735d3d-92807623f1e33fdf;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 26578\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"457135eb0a35be08e48ebc02b21f7ba2","sha1":"0bf9ac9d4ede05a4c1b9d957808a633ded10a47f","sha256":"484f76de162a7decea8d41a11b47061fef64a30a37a79255f88d9a034811727e","sha512":"a939cf73df4c07fda0f6b1aacd1f3384d47eb9038f03be44bc21b904fc8643b22ae76b532aa26ad2d97d2c2de8300c6732abe3a72af1d139d19f365ed38e71c3","ssdeep":"384:n+U27HOVQUCetJJwmfhK2gMeHFeraD7pLd3IFYRiVWRCRD4Mn2/wMEqf:f2bOVFCIJJXY2teHu+7pZ3YYmzHn2zE6","tlshash":"95c2e130a53794e7474e816e90fbe1a6c163631ebb8150d336dd0bb56592fc9681cb33","first_seen":"2024-08-15T09:23:09Z","last_seen":"2026-05-11T12:52:48.192672Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap.blockdag.network.collabscare.com/image/Terra.png","fqdn":"swap.blockdag.network.collabscare.com","domain":"collabscare.com","tld":"com"},"ip":{"addr":"198.251.81.49","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap.blockdag.network.collabscare.com/","date":"2026-03-10T23:38:26.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdag-presale.collabscare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 21:29:54 GMT","end":"Fri, 05 Jun 2026 21:29:53 GMT"},"fingerprint":{"sha1":"D4:F0:5E:C3:56:40:F8:18:19:2F:93:4B:8C:1B:D2:EE:45:3D:53:48","sha256":"DD:1E:AD:C1:B4:73:3C:54:F9:1E:AD:11:CD:ED:0E:63:19:39:FA:05:05:13:B4:76:05:3C:9B:57:23:13:68:70"}}},"request":{"raw":"GET /image/Terra.png HTTP/1.1\r\nHost: swap.blockdag.network.collabscare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap.blockdag.network.collabscare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 23:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 11:36:40 GMT\r\netag: \"f49-69735d48-9ba3fcf53bdafaef;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3913\r\ndate: Tue, 10 Mar 2026 23:38:26 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"94c0d0c293269f33e1dc6485d89c5470","sha1":"a3c5787cbbc9df31520764c84c77220268aa544b","sha256":"31f537305de3186abb3d416df957f61f4e547e7ebe31ae1f8c1bb9cbc57f6dd0","sha512":"8b41ae923365ffb0410e406ca9145649eba7b201542cc9969f562307219616bcb67cf64c0cc813dd860b9669763c3d86cc2290443ad2b30b6bd6d71d3c6246ba","ssdeep":"","tlshash":"82815cdc2b80106bcca69f856d59703f0cee285cde546c5e02b475537926ca98c3a0b3","first_seen":"2024-08-15T09:23:17Z","last_seen":"2026-05-11T12:52:48.175768Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1081,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"swap.blockdag.network.collabscare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}