{"report_id":"48fe8082-c05b-4ca9-a814-30ee87d4b66a","version":0,"status":"done","tags":[],"date":"2026-07-12T21:36:23Z","url":{"schema":"http","addr":"swanbitcoindesktop.com","fqdn":"swanbitcoindesktop.com","domain":"swanbitcoindesktop.com","tld":"com"},"ip":{"addr":"91.92.241.250","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"swanbitcoindesktop.com/","fqdn":"swanbitcoindesktop.com","domain":"swanbitcoindesktop.com","tld":"com"},"title":"Swan Desktop — Invest in Bitcoin","dom":{"size":63798,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (407)","md5":"c8c24a95737db005200727569b15f824","sha1":"ef788409eef60d88044b797128ec10c2e2506b27","sha256":"0248d710b89edff48010c23fbf9294f73bc2c3ea855eecac0cf8b2709ddeb0ea","sha512":"cbf05f09c15d961a8a5390a317c96c9e73f2392f24600c437553a85316b877a88c1f028db8599575b2bd911cb7ebc19cfffdd308cc7946246db8fc33b6be11c2","ssdeep":"768:HBzHse4gTjXypNifaelV986UuNeT7q5FrPMmC87vXow0UUUUkUUUUx3UUUU8Owph:5jXipkfaAVmuIEFTMx87vF5wph","tlshash":"ce53b473a5b71072b813a1a56ba3671a3765e447c50aca283bdc1388cfc6de9dd13b4c","dom_hash":"domhashc6a9ad199f017434ac299000d0fa6a66","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"swanbitcoindesktop.com","fqdn":"swanbitcoindesktop.com","domain":"swanbitcoindesktop.com","tld":"com"},"ip":{"addr":"91.92.241.250","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:36:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"swanbitcoindesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"swanbitcoindesktop.com","ip":{"addr":"91.92.241.250","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-11T07:25:53.928935Z","last_seen":"2026-07-11T07:25:53.928935Z","alert_count":1,"request_count":1,"received_data":63523,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"swanbitcoindesktop.com/","fqdn":"swanbitcoindesktop.com","domain":"swanbitcoindesktop.com","tld":"com"},"ip":{"addr":"91.92.241.250","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2e38e5e9172d6fc1127b60a1652a76b","sha1":"adc4b10dba24faf3ed3cc73476147f14e6ba5eda","sha256":"14174fbcf64d4439e10bdc69cb07a2c44b5dc5c7b2154fbeb121ae5676f075f4","sha512":"9349713159ac42ce20f5ec6a3209e35cdf48263c115f04b523747ecba6421449ab3f40f8189784386990f51202b1c6244b1863265d365e503cc211eb35e604a7","ssdeep":"","tlshash":"2021b827757300202b5ba2f95b571224bd74a093784099d57a0c97049fe2c1aa6fbdf9","size":1276,"data":"","first_seen":"2026-07-11T07:25:57.68427Z","last_seen":"2026-07-12T21:36:24.837746Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"swanbitcoindesktop.com/","fqdn":"swanbitcoindesktop.com","domain":"swanbitcoindesktop.com","tld":"com"},"ip":{"addr":"91.92.241.250","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:35:48.101Z","timestamp":1783892148101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swanbitcoindesktop.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:11:57 GMT","end":"Tue, 06 Oct 2026 14:11:56 GMT"},"fingerprint":{"sha1":"7A:E4:B1:06:77:DF:F0:74:17:7D:50:15:66:58:BC:3C:C6:54:A3:FF","sha256":"F6:51:8F:BC:8E:E1:3A:6F:C1:DC:CD:2A:D1:87:DD:FB:75:53:28:E3:35:2D:46:2E:1B:AC:B0:62:AB:A8:BE:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swanbitcoindesktop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\ndate: Sun, 12 Jul 2026 21:35:48 GMT\r\netag: \"6a4e67ad-f718\"\r\nlast-modified: Wed, 08 Jul 2026 15:07:25 GMT\r\nserver: nginx/1.31.2\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63256,"size_decoded":14924,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (392)","md5":"d7ff03719c1d6db2a583ad247a9293ea","sha1":"6c494dfe9b370113c0c2f073fad363d365f6c2c5","sha256":"6612f465c0cd66f3a7533345a5deeb55aa6a8f0975e5a67d8c2db15825dbf32a","sha512":"90fd986d46983423baa122373aeaf49b6280d56df87b7f45e09c744ffb2c2221c1cb9a078b295593c8185c558a92dba02f5f37a0f28c8036d527265c30419877","ssdeep":"768:67zHse4gTjXypNifaelV986UuyctgWXrVMn7Fv0ow1cOwKx2:CjXipkfaAVmuDlXxMn7FcjNwK4","tlshash":"6253a477a6b31072b813a0756ba7571a7765e443c50aca283bdc1388cfca9dadd13b4c","first_seen":"2026-07-11T07:25:57.668665Z","last_seen":"2026-07-12T21:36:24.834891Z","times_seen":2,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":22,"connect":59,"send":0,"wait":63,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"swanbitcoindesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}