{"report_id":"49694c8f-509f-4afa-96f6-35dbd2418f3b","version":6,"status":"done","tags":[],"date":"2026-03-06T10:11:27Z","url":{"schema":"http","addr":"swiftrexpay.com","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"swiftrexpay.com/","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"title":"SwiftreXpay","dom":{"size":43072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"061c8c5390079c3e684d76dcf6593db9","sha1":"172e798b1073a76b2db9df18972bbe8617596df0","sha256":"752c59285010841a67bcc2371e94b9d2942c2b5a04b520784cfec36b1d877b03","sha512":"1f1c7419069255b6bdd8c9d4c83aaf3ea1e9461f57c1b7f686b7c765c93f1198505ac06ef3c8eaa60ee70a5d916191bd362a764a32967ac7a764527f079d7467","ssdeep":"768:4j08FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYWf:4j08FYTbfsTO+LDCPKHshqa/XOl6rf","tlshash":"a91396176780462c9c5392a8f399a54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2026-02-17T10:26:12.040261Z","last_seen":"2026-03-10T04:58:40.39267Z","times_seen":233,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"swiftrexpay.com","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T10:11:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-03-04T21:57:05.946745Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-03-04T21:57:05.878487Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":523,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":3,"received_data":49679,"sent_data":1526,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-03-05T03:50:59.985758Z","alert_count":0,"request_count":3,"received_data":324406,"sent_data":1365,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":3,"received_data":1064099,"sent_data":1330,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"files.coinmarketcap.com","ip":{"addr":"108.157.229.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":4262692,"first_seen":"2015-09-03T05:46:35Z","last_seen":"2026-03-05T13:42:08.723596Z","alert_count":0,"request_count":1,"received_data":59462,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":2,"received_data":110185,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.shopify.com","ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"2005-03-11","domain_rank":3587,"first_seen":"2012-06-22T18:37:14Z","last_seen":"2026-03-02T01:05:14.923369Z","alert_count":0,"request_count":1,"received_data":1659,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-01T22:30:33.752681Z","alert_count":0,"request_count":4,"received_data":25255,"sent_data":2162,"comment":"","tags":null,"fingerprints":null},{"fqdn":"swiftrexpay.com","ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"domain_registered":"2024-09-20","domain_rank":0,"first_seen":"2025-03-20T08:51:24.7764Z","last_seen":"2025-03-20T08:51:24.7764Z","alert_count":130,"request_count":65,"received_data":6285703,"sent_data":29720,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.195.224.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-03-05T03:32:56.152791Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":604,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-01T22:33:58.871316Z","alert_count":0,"request_count":1,"received_data":31565,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.clare.ai","ip":{"addr":"172.66.173.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":1860643,"first_seen":"2018-10-06T08:31:00Z","last_seen":"2026-03-03T23:43:48.890134Z","alert_count":0,"request_count":1,"received_data":33378,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-03-02T14:23:43.407598Z","alert_count":0,"request_count":7,"received_data":11153,"sent_data":3219,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-03-02T07:35:19.018752Z","alert_count":0,"request_count":2,"received_data":83230,"sent_data":942,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wati-integration-service.clare.ai","ip":{"addr":"172.66.173.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":2256565,"first_seen":"2020-12-15T06:41:29Z","last_seen":"2026-03-05T03:25:38.908467Z","alert_count":0,"request_count":1,"received_data":13875,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kit.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2026-03-02T01:47:03.720348Z","alert_count":0,"request_count":2,"received_data":832,"sent_data":842,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget.coinlib.io","ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-05","domain_rank":0,"first_seen":"2018-10-03T18:45:45Z","last_seen":"2026-03-02T19:31:59.834469Z","alert_count":0,"request_count":11,"received_data":1063973,"sent_data":5658,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":11316,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-03-02T05:00:20.239865Z","alert_count":0,"request_count":3,"received_data":415119,"sent_data":1699,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-03-05T03:51:01.073919Z","alert_count":0,"request_count":1,"received_data":7668,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"3rdparty-apis.coinmarketcap.com","ip":{"addr":"65.9.46.123","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":3258633,"first_seen":"2020-09-29T03:34:53Z","last_seen":"2026-03-05T13:42:08.819302Z","alert_count":0,"request_count":1,"received_data":9029,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinMarquee.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"108.157.229.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7046f8f1f574e5f2da66f6cb5ba73b61","sha1":"f1d4f8820ce85f44bf92f39df949f12142747f94","sha256":"42ddd8b89cd2f3acae38059fec042e4f4f1d7ef0c5c33fc613f8d1afc9512b6d","sha512":"3b9c4ec5663e952511cb6d7298230603c1ddba8eed390e5950c13e0510d2a7b9c9758713dc1a2e7f7a1146528319db1a4affc9adf4634263747049e967201bfe","ssdeep":"768:6M4hcNGbZ7EX8bKkFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69UsZ7EX8bK+H+3vw+CJ+Ck40","tlshash":"dc4319da72c1b5de02a3f3b5542b0205a23e3e79748dc651f614dec2ae7b46c8613e38","size":58991,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-08-01T06:14:37.394825Z","times_seen":702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e125a9b3e8dae891a190beb17d146ac8","sha1":"94aa50f25a985ee9fdc3acfc7ad8b787ac0b4f9c","sha256":"198a7caffab903c41ce127498bc4a12a95c9d7b6a4ebb2f8d2d5e65957ba4ba9","sha512":"0fea1d481e334ee8cb756e216c2f04823e95216231e27bad968d9ab8caf625619c3c93d90ecf5c2019c77253db4d153c5eaf1c1c3fbeb310b89bfc0f92b096f8","ssdeep":"","tlshash":"50d08c88264b0ca292bb3b4b4bbfa102b0066213a0904d203d1e77449f20e27db44808","size":238,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-06-06T06:45:08.144712Z","times_seen":2720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-109558606-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93627719ec9343bad72e2dca631b5312","sha1":"12f82956964a3352dbe85d256322106e2a91e6a5","sha256":"56bfedf5f36f8c58e00821fb500eadbca82e69a380dfdbecf8f241229aaf2537","sha512":"e218b4b9955cbcff462dd6f6db0188b4ea3b2a95b188523debac382230a88c789181948c310f1fe386a0ca0bfb2d98e2e3495d087b862fe992fc9f32e61fdbb8","ssdeep":"6144:GkKfNlg2vN5BaKI0D8RGI/+0sApXxXGZKWB8:G/FS2vMU8An2","tlshash":"1d7419cdb7d6706253a3a478403f018bb27a7892f84cc899f186d9d42e7469a8137f7d","size":344593,"data":"","first_seen":"2026-03-06T10:11:37.368161Z","last_seen":"2026-03-06T22:50:44.390616Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.2CfIUc0XaNQ.O/am=AACA/d=1/exm=el_conf/ed=1/rs=AN8SPfqFeAdzyIfbX9mEFvUeY9i1820WzQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51bd0ebbe821f571ac9724f1be7f12ba","sha1":"8464ace0d7ddac922ba76c302c9515f5f88a926d","sha256":"5f700eff97507c3fb72c7d2d3bd5ca891f29a48d925107742c4d9fcaf9f889a8","sha512":"1148fda38e73955d91baab807008abf403d79abbe4e5518fd265fd54032d80b2e2dd9812e73f8da9fbacc195840dcc53aecd3fdca8947312932edfa1550df243","ssdeep":"3072:Bjusksi6Ud4IQAxxQASB6DbXCUV5sT5JODTSEIuThVnpO92dzIuhKb8j9xSZ07dU:pc905J3QoYdzINczS7","tlshash":"2d94d7c9b3a678629262f8e1906f10cbb53eac57a44c4c6cb149dcd25df094941b3f7b","size":413184,"data":"","first_seen":"2026-03-05T21:05:28.042651Z","last_seen":"2026-03-09T20:05:47.977468Z","times_seen":615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/_/translate_http/_/js/k=translate_http.tr.no.2CfIUc0XaNQ.O/am=AAAM/d=1/rs=AN8SPfqt-xUd4bFke4IoZJKdJEW_s5s-VQ/m=el_conf","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7635875b85f90ce70f7383ad21a4e127","sha1":"3a5c7551706665f9f422f828aa45cbe740728c43","sha256":"967655ed54fb3c8bef8ab0ab5e56453adddb2136a5243f113e20f2ca446597b5","sha512":"b78632ed30e0168e1d31252a7a80cdba7679a18c97a9068a32a81e5241a44f7c54431379c9ed884e86210e3daba9f9c8196327fb7b261017c1adcfba39bb4356","ssdeep":"1536:X0wM4NPg8wjMvLUJRLwqKMO7w3FQNUpEzCduiQUKiZwNWij:X+jMowqKM4w3FdrKiYj","tlshash":"9483b78cb6a675668367f5b5412f000eb23f599df8084cbcb288d8e1adb5948413bf7d","size":80912,"data":"","first_seen":"2026-03-06T10:04:43.264335Z","last_seen":"2026-03-06T10:38:27.809678Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f23a3cc01b366ca9f04ef4de766d7b5e","sha1":"7c4e170e24d96e007b316ee6f35fdbe8a2c697c3","sha256":"ad563ad5c455691e2265b771b5a79b085496463ba0cc24629aa2e9436484daf1","sha512":"7bd963479285937e32e471ff0539f44a58fa10d68b1fff1d3f31087289c1267773b145f9cdac7e187d4e33bd19c0a246baa752000e06e7e5e14c9ea695703c78","ssdeep":"","tlshash":"6ae0c0db70521c72619f89b633b5e5247153260db8091c22fdfd88242f9899b481619c","size":421,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-12T20:21:40.240228Z","times_seen":2785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-02T18:49:22.851207Z","times_seen":83992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.nice-select.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-02T16:51:28.646738Z","times_seen":10414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_our.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"000b4aa1fdecdd7f05fac90a172bff2e","sha1":"83fe2b4a92fd967d4ae10a66ab9c9f7cfb8db75c","sha256":"b80e46aa15043724f1c2c9cffb3a41fa4540d2ab531feef3f127ce3b03170e1b","sha512":"59ae80276f20cc7a35b7299ca4a2705b38e44f2c579a8170a6d7795d4dde531bf25506696825037a65481f97b2434b25b232ec13560953699eb422c2b667e2a7","ssdeep":"768:/z5PUWzyZNKSzTuoDTE2E8jHVemd1Hsng3Oh8gvwZfeUnatOuOPGdjH/AAu5P/:9OZNKSI2E/mdFYoBZRhPWjYAu1","tlshash":"6193922de8f72031603371b98b7f61047a69a0274a44ed057e1c57d02f86ab8b6f5fad","size":90641,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-12T20:21:40.115094Z","times_seen":2766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d46d849c75ad92a8471dd545cdf2dd2","sha1":"8de187748f8712566f19ace0df28185ee3a125cc","sha256":"220c72cb3c5a8fedb5bc4d2c04476f14af8ee83e342081362de3bb901f5fc096","sha512":"606498ae38f1e122c3daf147c3138095863954f3a5510bc49d435176217127ea0118499c83cc4238958c9a8513a50d69b7c0ad859fc10c95e9479f97aa61f783","ssdeep":"","tlshash":"b9e08c0bb071114b0087f009d38a08883134810b01390d28368c608a3fb3f8c038e6ac","size":329,"data":"","first_seen":"2023-03-25T22:21:41Z","last_seen":"2026-06-07T07:17:39.550429Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wati-integration-service.clare.ai/ShopifyWidget/shopifyWidget.js?1817","fqdn":"wati-integration-service.clare.ai","domain":"clare.ai","tld":"ai"},"ip":{"addr":"172.66.173.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a0640e91730cfae6f12d54d88b47a5d","sha1":"810aa04709673072f5a0cdc68b9b827f703559c2","sha256":"2d5df1f86ad362ad342d3b15dced013e89888336cb1120b26a323be0c9d7d285","sha512":"1df9b11516fd5f1eb86ac91dab29410c061a4a87dce30a7f93d512ca428d5fba9149f9d57e732025fe5ec61da269ff26b740db817e1599f811707a4944104e69","ssdeep":"192:TNzz7VccWGfv37rfzWmgAdc3UL9NpjilrSiZ4a/3pAW/ky+RTq91CVudSvJvSv21:xzHVPXfamgAmmbQrSBU2NZmRmKg5kDWR","tlshash":"a55284b542a3101470d7a0a89be93b8517318097dc05fc793bed9ba49fdbac8a5d3f24","size":13535,"data":"","first_seen":"2025-04-01T14:26:20.064813Z","last_seen":"2026-07-27T13:22:00.22012Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/bootstrap.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61f338f870fcd0ff46362ef109d28533","sha1":"b3c116c65e6f053aaab45e5619a78ec00271a50f","sha256":"5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548","sha512":"8c2694d03a7721b303959e9fe9d4844129cead2b2e806e85e988a04569da822ec7a0e2ec845d64c312d3e3ec42651810b1336aa542a3e969963b1b2ef65dd444","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B0+:uoFXOCx0wNGaYk+","tlshash":"c143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","size":60010,"data":"","first_seen":"2023-03-07T01:02:23Z","last_seen":"2026-08-02T17:52:45.240696Z","times_seen":13767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12d3e294a4b82f6c96c7a3cb70c2df76","sha1":"c9532547ed2c86c5a94d31b99b31280071c2db77","sha256":"0bf6dea8ea0958185d3c5dc20ecab8e8173470e2c3e5e109dd5c8c850798f928","sha512":"9bae3cfaa020944027e26e2e4397b44844a1964115ae751ab4ac714dabdc6862b7fbfcc28b049c413f6d1f6b7d15f2cfdff30d974eef1375b9ffc8c6d12e4565","ssdeep":"","tlshash":"3bc048c40433e2c420a767060bd715c43032990760b2880c3f5e00462fe0cce838ba68","size":171,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-06-06T06:45:08.147928Z","times_seen":2660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3d038c59c615ff247fbd448d79ea563","sha1":"f398f540cd461a70378e6005022f9c9fc7438ef1","sha256":"18607c0f690ccf374bab5477dfa15f274b9c502f5d09cd3b1584a78e34dc47ce","sha512":"5c697501e8c47a164f7724db7ca592eb8a9951fbea43dfca30a762f70b1a6fcd5d505991824f784e3d60948e5a3a22569c326efb12ed81bfeebf63808f3e4d97","ssdeep":"","tlshash":"3ec048bd40030c8030e660106b872e802802a20712ec88003baecb20afe38db8542ba9","size":153,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-06-06T06:45:08.148722Z","times_seen":2613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.countTo.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ac11c01ea3885061ce1d564f6a4f7ad","sha1":"7c84e8385d0a002034af9700cd382e8f0f4a2e7b","sha256":"65800a729f583f1366785a9890e856396f4563f7b1b2d3b8ea4e275950a65d5e","sha512":"2fe757a0ade65de9718fd5470db991683e3e80ece2d5970c85442eff8e4ac1b3d9aa900709d54847726a2b1c77eea498ce8a6c760570842bd1df908cf2d96b43","ssdeep":"","tlshash":"43615e09bbab2211955b20dd5f5f114c3274932b184b8548799d93c08fa6c39e69bfbc","size":3466,"data":"","first_seen":"2023-03-07T01:10:19Z","last_seen":"2026-08-02T15:32:38.789245Z","times_seen":2003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/popper.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1d29c9b4fa7a8ee8417a01bc9ac1b56","sha1":"0c78c7993cba9ca26741f1df9735eb18d4c0e50d","sha256":"e074908c3749fe751173f181f33c7092f3a7b4de504dc12ebe072d537a7607c4","sha512":"142f2b7fa9dc007d01f6d44cc89eba587d7c47258bd3b2b4360359ab2345e822306e79588da16b9518728f4dc99a495990897ab800f8a3a7107f5fd0a8ed8eb2","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db9O:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO9O","tlshash":"2892a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","size":20494,"data":"","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-07-27T12:34:04.676907Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/script.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7751556f5c0f92b8218e406b40bedb27","sha1":"1cb42ba61a95f52e8fd616924f04d46002c01221","sha256":"008b9d03bb5f6c715c973cd710b411a1854b6abf31030d13727a3bda9c9929a5","sha512":"36e6d317f4b734aa533dc5f4549f88e7a88113d804049a0afd608281c5a7f6b6ade2a9f38cd18a1eb525c7dd8040eceb83fecaaa916fe3d8e506f33659ad3e6c","ssdeep":"384:YMZZnOKu26Y7jh5GO26xkeDFZ+g2JjkPii/1:R/OKz6Y7e4kkr+gUI6i/1","tlshash":"b17220c0f7bc25a3907b3195995ea1c52a7d0437c8426877fcbe15282fc971e36eae18","size":16536,"data":"","first_seen":"2025-03-16T15:21:51.736417Z","last_seen":"2026-07-27T10:32:54.783476Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/sandbox%20eval%20code","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"05abbd3195f9a47f230d87f6bfcb9238","sha1":"201ead203c0a679f7796dc409adddb556d0462d9","sha256":"2611e9a5fe2ae71cd1fd6e02f73e16003cd2f41924db225d02b64f4739af4f17","sha512":"8d2bc36db69c3f23ea58984a5cc3d4a66fddb62c362ef6a355d2e1f5c11680ed0928b951b4569aa5113b98ad990b5aeb066aba7877e2c27ab4299efb75718697","ssdeep":"","tlshash":"6de0f83d3c3580a607a300f480fbf2283e0a30200080e85388aac87a6cf0fcaad02d89","size":418,"data":"","first_seen":"2026-03-06T10:11:37.45297Z","last_seen":"2026-03-06T11:12:13.473763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/scrollbar.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-02T06:09:44.702348Z","times_seen":4255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.fancybox.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","size":154104,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-02T12:26:42.512028Z","times_seen":3546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/validation.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","size":36153,"data":"","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-08-01T04:36:03.170543Z","times_seen":1171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-02T09:54:10.801676Z","times_seen":78324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0652b5fb79e5b34b5c29a365328fb8d","sha1":"f2744838ca7d5d8521a501b47599c519ffd1e496","sha256":"45e765b2061f3b62b794078b7af3f722aee9b2097653689cbbe68e6dc4454032","sha512":"e303c446972b2250bdfe21af382b0810c9f86bc8d00d9dc2d047e270d54e3bcd98acd6525dd5eacecaf2f39b1c200128fdcc77e853becbcf075ea21c294e84a8","ssdeep":"","tlshash":"57211f69ed031c91a24b456b21fec642606a411bec40fc26b70c8d1c8f68dcf797badc","size":1112,"data":"","first_seen":"2026-03-06T10:11:37.45509Z","last_seen":"2026-03-06T11:12:13.477062Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93530941e3234f0f9f041ead0c847f5c","sha1":"88cccd839285c137493fafa8071ba62adbbf147b","sha256":"5351acf6e515c2aba2d39faefa72e1e290b5e886ff520ff6c6c8c07748a581a9","sha512":"f579c441139009a29c9e01dc3f9c191bad677eb754ea5341f508a0a675b5487efda9a218bf2624116ee224e16316b47fbae6a5a2460774311e964e6f03d27c99","ssdeep":"","tlshash":"05313f1921b344214523242c1b9f7b00772744a712c4ef03352d5bcd6f92723a716ef8","size":1446,"data":"","first_seen":"2025-03-11T09:42:27.666354Z","last_seen":"2026-04-26T04:24:29.604384Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9421daa32818de1351b6c0b4594567a3","sha1":"abab15b62e4165624fd0790ba89d8af08efdc7e8","sha256":"c84108bdf3d878badc951a9d26221f337a23760ef991fbaeed48effef8ee7968","sha512":"3c03fa5a566f1f2bc5d8fd15505f3e49286495787cbcfb9529e9063eb0ecc44eef767a66ea521b2b04d842a811246244b024232c4af6907c861fb43f47fb906e","ssdeep":"","tlshash":"36b09286f9958aa030b26b92c50b321f14e029169800e5a9f00c9a254b0698908069fe","size":122,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-04-28T06:20:17.369951Z","times_seen":2407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/appear.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","size":4228,"data":"","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-08-02T15:27:28.637093Z","times_seen":5233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_lib.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a781036bff64b8fdb1f64d73a110c40","sha1":"5b9f645eea9d940f98aefe62a2ebb215a1b1b419","sha256":"d5a4117a99579fbd511260552f0d103d3c3c9e983889d853ab245d95dd9ca7e3","sha512":"991c5ff93e85e56777fab81a4f68c5b1a89da86e277b84d9d5f4c0fa032fa646cec282fded57a00f7636fcfa2eda10fd8c83faa89b98963b2d1996434687512c","ssdeep":"6144:9RzEOQ0+iea98Hr9STVvCgfkvGnxjR9aSrp7wwL0kYlP:cOz+iiSTVv7oGjw2eBlP","tlshash":"53741a8d72a2707182bb307a456f410fb13a946f6409c8a4f56cc5e82fb8d6c61b7f79","size":353286,"data":"","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-05T18:53:23.091465Z","times_seen":2759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53bdf76356abd3bce249982ebf333b7","sha1":"a5e71f212787edcfefffb154914c19a55979dfc6","sha256":"5ac084ec8860fa9472b4af0e372c275294f54ce2b02a1289e86d9a0c99702e39","sha512":"81418bde10e734062cbcac01583aa8eb5d55699a9e416ab6ec031ced12f4526ebdac1e6d378ed3522b17f3dccee5f26ce17df308d77a207ff9e76fbd253a1384","ssdeep":"","tlshash":"30e07d59bc69868c895b162e957bc7a8a58100492d90982300d1dac97f21ece029b99c","size":327,"data":"","first_seen":"2024-11-22T12:45:12.805491Z","last_seen":"2026-07-12T20:21:40.372515Z","times_seen":2217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/owl.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","size":85303,"data":"","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-08-02T12:26:42.48616Z","times_seen":4672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/nav-tool.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e28a1be506d3151bad02d20a7751f09c","sha1":"d0a106cd4d593b36c86c3740d26b6d332c740207","sha256":"e35de31330187c0f62603f8b770e2969cbc3fe0d885aa02c7dcdd6fbe5134691","sha512":"e7faae5c7937eb0e2569b90d0dd804b6f0a5c72d30f148770f36c5bde1fec88fe412be41416f91d1caf5fdf6a07059a31119673bdd003ec9f70789eeb9c84455","ssdeep":"","tlshash":"ae11aa68b830e2fd01fb631930139e40c23a0dc5ca2c1d95982019882e6bdcf41eb7fe","size":1086,"data":"","first_seen":"2023-03-07T12:02:54Z","last_seen":"2026-07-31T11:56:19.148695Z","times_seen":943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/TweenMax.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","size":115897,"data":"","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-08-02T16:46:21.650109Z","times_seen":2766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K638SKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"986fe5a69df8c72f762d2e2b8ead5058","sha1":"4c1a4a1c5a005bf0976b52389c6c23a655dab30d","sha256":"5448f06b30e0b3bb564f5e760455e367976e1b8937777895eef2852130c08fd8","sha512":"4c964354589553e7e79548100dff8c2bf35155a5025967e3ada2ccf205e4d61faee94fc4f3b488480355fd0798dd689c7ef7efe50d97bd310cb0d44377ad50ac","ssdeep":"6144:SkKfNlv2vN5BaKI0D8RGI/V0sApXxcZB+:S/Fd2vMU8Fw","tlshash":"4b6408cdb7d6b06243a3a478403f114bb23a7892f88cc894f186d9d56e746698237f7d","size":307271,"data":"","first_seen":"2026-03-06T10:11:37.38714Z","last_seen":"2026-03-06T22:43:21.127493Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-c5ThC_K-.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcd469aa001be1dfd30d0962c705391c","sha1":"87b8c021a1232a7ba7cd2d482113782215313b9f","sha256":"df06e0821c7c9aaa47dc040afcefc59ff8743c8beec02bed3ce656cfa9163020","sha512":"1c344e4bea46a7c81544ced75a2c75c38aa64ad7ddf395c1a0beb293373d339fbb4aea0b0b13864028be791060a40eb12d557d01c7e13169264712b416f91304","ssdeep":"6144:AsJU8SN+jtxjR/ZgQub5/rLmPh+WVcq9kNp:AwU8SN1b5/rL+HV3up","tlshash":"5e544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283561,"data":"","first_seen":"2026-03-02T08:25:26.037318Z","last_seen":"2026-03-10T05:00:21.849653Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/our/i18next.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a80aff60a79f6c89a0a50c9eb96c645","sha1":"92d0601448dc60514d04505661cf602c3088ac9e","sha256":"95deeb4c5d331ffbf7c0afc0c53850f1a9065b00d7b91f69b3d13486ea1a6215","sha512":"28a4a0b0f9a26649e694dd28b1eb00dd9f1c269c0e5f1948d0286a63d6f1744ffe90b702cf15e55111174062d996ef0bebe2f9ea50665058ed239676e63eb879","ssdeep":"","tlshash":"67219a9920f7966450dba16a67cb3684786c805732649d003f0c4e021fb2dbba7e8fd9","size":1322,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-07-12T20:21:40.202696Z","times_seen":2890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/wow.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","size":6299,"data":"","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-08-02T12:26:42.51341Z","times_seen":3910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/circle-progress.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6816a923a10ae7680223d740150448a5","sha1":"d0b3b3b1b28f8d0585fc44cb455a9f029bc79684","sha256":"8e66938dc60763b5706ce779ca119e9eda349c2e8aa8136ca1bc72666be13128","sha512":"8d18914c0f210ffb905a11adc1b9558c06b8b7b03bd4fa52915248b01a16e400fc9422ff4769cb9f207b515bc826dab6a9de6abbf6645c72e5544a6185a5294e","ssdeep":"192:RnenM5DZLpkvR60Nkzx35Ia7yIAR/+SbA1wg1RobQW4z1N6qaHq50pd0lOhCOUKT:KmnwrJBHq5ad0liZPeem4uVw","tlshash":"5552501a9ef704679417e4394baf1141ea61520f6a0aed9c3c6c63b40f58b3143bebf8","size":14238,"data":"","first_seen":"2023-03-07T12:40:48Z","last_seen":"2026-08-02T11:16:24.527678Z","times_seen":5849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e6341","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f62e5c37e24ae63894f2b25eb4080c1","sha1":"5bb2eaa0bb4dae65f7bd915ec71fd15c5a30aa4f","sha256":"da4c7a36908e776a7963fb0a3e22af9ec56f7884c834d98ae9b78a9f9d0577cc","sha512":"4458c861f8971be52e8fce0a25c62daee8c7b312c9b78cba2019b2b98d4051f5e41785e8b4a003c4288d25fc9e95e89c95df957c529d56f811f0011b268916ca","ssdeep":"6144:8ekKfNl3H2vNQBaKI0SfZ8RGw/V0sApXxoZyiJz:l/FxH2vnDfZ8Bz","tlshash":"c59419cdb3c6702253a6f478503f018ba57b68a2b48cc899f189dcd46e7469a8137f7d","size":410351,"data":"","first_seen":"2026-03-06T10:11:37.39239Z","last_seen":"2026-03-06T22:50:44.423187Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#234","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-01T18:07:05.307509Z","times_seen":37103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"23723b094bdc424199dd24b0420feb00","sha1":"2e9fd96b082f9fee856afacb67c08d992304b5c6","sha256":"c5338309855deef1a4fb8a09324fa032bd451a502ca631136b7b6d09ab7dab4a","sha512":"e5237a67b4b24b1cbec00b51e98444b28cb19cc4be9149f7c7f6b660fe085c08fe2af36be3bc82c627a10930d67ae3761e51240c91f3102dc43dabe553c5ee09","ssdeep":"","tlshash":"73513fa2605ca01b4503d5d0f8a23eeef4de0058c37569d07e1c29efeaeac77049716e","size":3011,"data":"","first_seen":"2026-02-17T21:42:15.633193Z","last_seen":"2026-03-16T19:17:37.073267Z","times_seen":1198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"kit.fontawesome.com/a076d05399.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /a076d05399.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d8092fe6d170731-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":32,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/work-1.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/work-1.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 112082\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x568, components 3","md5":"03690f1cebf18df161a65970785fa1bf","sha1":"65a63d79925ab8b4c6ba2e9253a6d9c6b7b6bad0","sha256":"855f3fd00074fe997b6fb466cb7b7564bb62dc5a1399cb45d3db288f354e8392","sha512":"0ed69cc87f3d3201a435cf72e1c2899cd2e32ec45c1fd90ce75a3346a999bc72f559703c295c7717ab07b1ae3b5d2511d56541966863b8904e2910dd7027c832","ssdeep":"1536:j/GMCXHBXSWdXwsYfgUcYWaWIE+DIpUMHCVml+mkB3RomSZDOZjdL6/0BjMLQK:j/5wHBXSW9wRI/IErDIF4mSZD85xMp","tlshash":"fdb31371c2f26b1be79c579026bfdae25d5a38b8d31f06967cd0d46e803a350c5278c8","first_seen":"2025-11-13T04:01:50.154671Z","last_seen":"2026-07-27T10:32:54.75863Z","times_seen":15,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 22:00:41 GMT\r\nexpires: Thu, 04 Mar 2027 22:00:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130223\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-01T02:32:19.771217Z","times_seen":7901,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":30,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/fonts/fa-regular-400.woff","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/fonts/fa-regular-400.woff HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/font-awesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/our/i18next.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/js/our/i18next.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=converter\u0026theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 557\r\ncontent-type: application/javascript\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\netag: \"52a-5f8aa4d7204c0-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 12:46:51 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fh%2F9oprzwug9KFANkqC8aXn7ljh9ngNACdJ5EdKu7m9ppMsqA8WXQpWsXyi7q5faUEc65FmHA4fN1VQpH35kwFXSAOzyYBwgCi4KPSlCZWtb\"}]}\r\ncf-ray: 9d809302b9b79ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1a80aff60a79f6c89a0a50c9eb96c645","sha1":"92d0601448dc60514d04505661cf602c3088ac9e","sha256":"95deeb4c5d331ffbf7c0afc0c53850f1a9065b00d7b91f69b3d13486ea1a6215","sha512":"28a4a0b0f9a26649e694dd28b1eb00dd9f1c269c0e5f1948d0286a63d6f1744ffe90b702cf15e55111174062d996ef0bebe2f9ea50665058ed239676e63eb879","ssdeep":"","tlshash":"67219a9920f7966450dba16a67cb3684786c805732649d003f0c4e021fb2dbba7e8fd9","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-07-12T20:21:40.202696Z","times_seen":2890,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Arimo:400,400i,700,700i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Arimo:400,400i,700,700i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 10:11:04 GMT\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10630,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f290d9928683149bf66b54a39dec0281","sha1":"d686edbc193a8b9d8323318a85198736a64c3470","sha256":"ac3f5e2b108c01fff2d27c042650c01d16bbe4b64e91554062b0a4f57eb6a9ef","sha512":"fd4df21eb9624e374ba10f752305310fe5d5535ea53bfd1074f4c477c4606e0729ffe6a4520b1007444079ef99d087217d51671654a300c08907d924647eeca9","ssdeep":"192:XOsnOEOKOf0OoIOCOZVOKrsnrErKrf0roIrCrZVrSYFWLfOsSwv38DTYcWuCOVSV:XJnlLv5IJozAnY2wsIezV5IXV","tlshash":"11229aa1041be480ee870cd277cf7d3aae4e61597445d1baabfe08dcac96c235394b1d","first_seen":"2025-09-12T05:07:40.945521Z","last_seen":"2026-05-18T10:03:45.297019Z","times_seen":175,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":130,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/project-5.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/project-5.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 117331\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":117331,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 650x450, components 3","md5":"bac959cf00edf8aa4f3cfe5d6d5b8fee","sha1":"9e88bd13f9800772d1fcd93e240c606fcfd076fa","sha256":"75e9f6798646bf567429fcd7dfd296d302fa8fae21110a975cbeabf9056801d6","sha512":"863470e6ec57ddb7e9bbf76b6a78737d377d9f6d630be53c0cd994a3d10e62722d3d004add6076eb53d58f8c96fa29e5577cefb05810087bf99c48b7c7569c45","ssdeep":"3072:ipfp9l4uUdnGU/NftaaHg5x1/f5PQENoVEkZ/CTrEpHX3Xp:s/sdJj8x1/f5PQENoCkZaTyZ","tlshash":"a6b31208f9273bf6d92893fa4606797bb8d22af6401c412735d41f4ef5cac9ce1d2962","first_seen":"2024-12-01T22:57:02.641611Z","last_seen":"2026-07-27T10:32:54.773698Z","times_seen":19,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.nice-select.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-02T16:51:28.646738Z","times_seen":10414,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:06 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69a543fc-7b0\"\r\nexpires: Mon, 02 Mar 2026 08:09:17 GMT\r\nlast-modified: Mon, 02 Mar 2026 08:02:04 GMT\r\nx-77-nzt: EwwBuUwJGwH3EgAAAAwBuUwKCQH3AAAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb541236efd5da13aa8aa69f099f207\r\nx-77-cache: HIT\r\nx-77-age: 18\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28ee61d71d429e47c8cfbc01f8ffcea9","sha1":"42d5fd8d5dee0f75e30f24d7b996ce60aaf32121","sha256":"e705b4ee1f5ffe1bcaf198567bc2d83d370fc56a50c6181c86ed04ef68f6c1f1","sha512":"d6a25a596f05e6ef34374672b7f12995e03a0be9bc9e7dd0dcecf3bf50deb5e1c968aa2bbe36d8e597263995f70b51005f4c4a8d60cbfa90f8efe3444d91ae35","ssdeep":"","tlshash":"ea412493c4f80d531b9c662bb89449814d90c3c7e88a3d1d366d8a7f2f4ceb911e6b6d","first_seen":"2026-03-02T08:25:26.032575Z","last_seen":"2026-03-10T05:00:21.827354Z","times_seen":430,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":52,"dns":19,"connect":8,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.195.224.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://swiftrexpay.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: hMeO3GJwlv8QhvlRju5uuA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 06 Mar 2026 10:11:06 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: stKHJOaq0Nm88NPfNNRk7NNJGTM=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":137,"connect":157,"send":0,"wait":22,"receive":1,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.2CfIUc0XaNQ.O/am=AACA/d=1/exm=el_conf/ed=1/rs=AN8SPfqFeAdzyIfbX9mEFvUeY9i1820WzQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.2CfIUc0XaNQ.O/am=AACA/d=1/exm=el_conf/ed=1/rs=AN8SPfqFeAdzyIfbX9mEFvUeY9i1820WzQ/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 119927\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 20:13:03 GMT\r\nexpires: Fri, 05 Mar 2027 20:13:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Mar 2026 22:09:35 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 50282\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":413184,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"51bd0ebbe821f571ac9724f1be7f12ba","sha1":"8464ace0d7ddac922ba76c302c9515f5f88a926d","sha256":"5f700eff97507c3fb72c7d2d3bd5ca891f29a48d925107742c4d9fcaf9f889a8","sha512":"1148fda38e73955d91baab807008abf403d79abbe4e5518fd265fd54032d80b2e2dd9812e73f8da9fbacc195840dcc53aecd3fdca8947312932edfa1550df243","ssdeep":"3072:Bjusksi6Ud4IQAxxQASB6DbXCUV5sT5JODTSEIuThVnpO92dzIuhKb8j9xSZ07dU:pc905J3QoYdzINczS7","tlshash":"2d94d7c9b3a678629262f8e1906f10cbb53eac57a44c4c6cb149dcd25df094941b3f7b","first_seen":"2026-03-05T21:05:28.042651Z","last_seen":"2026-03-09T20:05:47.977468Z","times_seen":615,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":98,"dns":15,"connect":28,"send":0,"wait":29,"receive":69,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/shape-17.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/shape-17.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10993\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10993,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 231, 8-bit/color RGBA, non-interlaced","md5":"ec53ecae5be40df97be15a2522bdd84b","sha1":"0698cd547f3dadff9a307c5860020916497b93bc","sha256":"679bce3a180ba1da0848192d8f9b5232e350e3244654e2a748bc62a742d78840","sha512":"d50a997405080b0e1f359d6ca4f32224859d0729f8ec91327997d880080a188652699049e8ed9af6fcb501549d543727bfe09c42bbaa3ba24046082b731d600c","ssdeep":"192:JkmKoBgt4tlH/xtkziMq6chLn9uSBlPizunvTD7mgZzUW6+TWGN:SmI4tJYUR9uuJnnSgZz/hTdN","tlshash":"4f32bf9fe84ba12eef658a10f6f12d0fee611381bd49f118ecccdaa69205c5444dc5d9","first_seen":"2025-11-13T04:01:50.156321Z","last_seen":"2026-03-11T05:18:34.354211Z","times_seen":8,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\ncf-ray: 9d8092fe6b862678-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 115837\r\nexpires: Wed, 24 Feb 2027 10:11:04 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IEgEDmoBx18vcnTn57YiJXUMsfNuRerwwe32mRfvqqemeLTGYLPH8yDNAjxEvsikAYguV2UVmd2XWrnaFK1I0IpHXs2WvoN3t7wrtr7OJvs3nUZ%2Ff80qnxGlHnOMkatXWkVbyRlQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-02T18:49:50.394308Z","times_seen":305211,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":23,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/flaticon.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/flaticon.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 982\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5180,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ed5e8cf151d6814a851b470fa27254e0","sha1":"0d700e0a56e6c2591cb5758768d59bf3f1c123e9","sha256":"9e3c378b1e79b6e79eb378f0934e17a268e6b071fcafe6cb0b1ab085d5a706a7","sha512":"6d0b7f9be20e5da558b4ffa7946f7bbea23b599422972eabf5c2fc4af47fd118e6414b9d2a9e637644a46f6d92e7962ed907c63ff7f6dbfa5b61140ab65c386f","ssdeep":"96:DXEmJNMr8+XMKErLjoaLgsEBZDzXwFxTk:DXEmznGMJUaLgsELwvA","tlshash":"9eb129b6d12f10845711ea8123ab7200af94b02c9ce8bc79d1566e9dfbf5f1887876dc","first_seen":"2025-11-13T04:01:50.173072Z","last_seen":"2026-03-11T05:18:34.385186Z","times_seen":7,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/logo.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59549\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 98, 8-bit/color RGBA, non-interlaced","md5":"c3f7f8af31ba53839ad91066deea17c6","sha1":"bcae54d264ef1ea6804682571145186f4831d9bc","sha256":"a8906a9c5a6eb3fb4b999568c54bae61fe5831ee15e7a222d5c7ec54f5ff786d","sha512":"8970aecd0d1f619310cc26a621acfffe9ed04eb45666b21d4663846e75290a24d409217a2a8a0471f4a7a2c63c7c792c11d57dcfd191884a6c04b5e596a94a9b","ssdeep":"1536:eNduzSxehF7/ngtKYX0ozW4Ot1+SuVxQwWTMJVbU+7GgNy:e+zSYBPYnSStzMUBo","tlshash":"6243f2916e04cb94431a0632f7e1c496b9416ea5c0ddf6f22a8f6c48adde1463690fff","first_seen":"2026-03-06T10:11:37.344406Z","last_seen":"2026-03-06T11:12:13.381498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/validation.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/validation.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11747\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36157,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20948)","md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-08-01T04:36:03.170543Z","times_seen":1171,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/fonts/fa-regular-400.ttf","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/fonts/fa-regular-400.ttf HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/font-awesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/s/files/1/0070/3666/5911/files/Vector.png?574","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 21:23:42 GMT","end":"Tue, 12 May 2026 22:23:34 GMT"},"fingerprint":{"sha1":"A6:68:0A:FF:43:BC:63:FC:2E:25:31:2E:67:F0:F4:93:52:30:B1:22","sha256":"22:78:4F:F7:95:78:0E:2C:0B:01:2D:AA:20:55:69:55:4D:C0:D5:16:0A:F6:0A:C9:1D:88:E4:DE:10:C0:CB:00"}}},"request":{"raw":"GET /s/files/1/0070/3666/5911/files/Vector.png?574 HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 303\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlink: \u003chttps://cdn.shopify.com/s/files/1/0070/3666/5911/files/Vector.png\u003e; rel=\"canonical\"\r\nsource-length: 255\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-request-id: b9572165-b92a-4a9a-8478-c7044689ee09-1769638601\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-dc: gcp-us-east1,gcp-us-central1\r\nlast-modified: Wed, 28 Jan 2026 22:16:41 GMT\r\ncf-cache-status: HIT\r\nage: 2017583\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k2VgodZs3Erq4R3EH1TZDAaOJVtJqV%2Bjh8V7CrXOrMYP87ui890sode%2Bv5eExJBbuisY2DDsTyGPs2cJ%2BinUWeiZqQA82tfafYN091A8hYYWL3giOQRJw65Lef5fhTaxeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: imagery;dur=367.483, imageryFetch;dur=357.900, imageryProcess;dur=9.028;desc=\"image\", cfRequestDuration;dur=48.000097\r\nx-shopid: 7036665911, deprecation date Feb 28 2026\r\nserver: cloudflare\r\ncf-ray: 9d809308adad4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"7027ffb860077e87a09c1572b4ba3b13","sha1":"d3e5499ea93ef29dcb43a6c3fc31fb660da61b13","sha256":"7178470d09904b63d798540aac5447de6a466c67f3372ab9c323c39aad343915","sha512":"64c56d37c01e0bb6b83920e1f441618a425e5366767f597c144e639b449eb92128fde46238266899f361c7a24a1f97197f3ee20a8ee5c297bf929ffa28f63d04","ssdeep":"","tlshash":"5fe072e78b21cdbec04e4cb82a22021cf8632f856a16280ba845382d2d086c2b61ce43","first_seen":"2024-05-09T18:36:31Z","last_seen":"2026-08-01T22:21:05.786252Z","times_seen":552,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":32,"dns":11,"connect":2,"send":0,"wait":56,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/service-3.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/service-3.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56587\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56587,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x300, components 3","md5":"c4ede6ce5394997dbc0a407240384b9b","sha1":"c7032a01c281eb3307d2f964249529c4571b60b4","sha256":"f9fe00071b0b4dfce25bbfee1f51f455f0da1063eecc60468b741a1a37bc7df7","sha512":"a757751007b948a4bbb6b6d4ff6d9fc1f59982179ab1db1189add4fadd5cf28e9cf64214bad19fcbad8bba16a30305c66f9e8f91cdf6a843a966c742ed138981","ssdeep":"1536:GQsySd83lXCgW76UyPnXscXHQLNuOy57auvh/:sySdn1yPXLWNUMuZ/","tlshash":"5f43f1c1b16d9d10e02da6ac56a6ca9b5287f9f2fccc8c91f49617e55069b030cd478f","first_seen":"2024-12-01T22:57:02.629032Z","last_seen":"2026-07-27T10:32:54.810497Z","times_seen":23,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/css/merged-bootstrap-styles.css?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/css/merged-bootstrap-styles.css?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=converter\u0026theme=light\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 55063\r\ncontent-type: text/css\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\netag: \"578a1-5f89b763ecdc0-gzip\"\r\nlast-modified: Wed, 05 Apr 2023 19:04:31 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IcxXJ5kBV5VXREQDWD50n209zcGOujzH4rwZYosed3awPEnjq82vzCpvgF5jcd8Y4Vw0qKTcXIYE8yygvyr3bxhB208vJKyNGlfme1FmaNA%2B\"}]}\r\ncf-ray: 9d809302c9ba9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42541)","md5":"f38db591d76a07a82e01ee5f804db9bf","sha1":"c0dd7be6025f7cb06cff8baea863e914f13739f9","sha256":"7e3fdaa5cb73e63a0aaeeaeee379d8a8d6edd40d99b62200f44c3d5a2d3c6c92","sha512":"42331891065c341814b1ba9145fc6a6d13c59ef842e542f274eddc54d2c2e8c0cf39597fbb5a526451f3ececed91585f49bcc7d35a5340b1519b1cb95d634823","ssdeep":"6144:w1vH3GjInc3SYiRENM6HN26gKkP01awENM6HN26t:4vH3LP3","tlshash":"977474a7f15021aca263c51e66c0bbbd156fe255d6120ffaf4273b684bc52c609a3f1c","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-06-09T00:21:53.237689Z","times_seen":2754,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://widget.coinlib.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d809302ffde32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-02T09:54:10.801676Z","times_seen":78324,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":25,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/cdn-cgi/rum?","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:05.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 634\r\nOrigin: https://widget.coinlib.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=converter\u0026theme=light\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":634,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"https://swiftrexpay.com/\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1772791864393,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"ecbf3499-20bf-4788-a424-b3243617d925\",\"location\":\"https://widget.coinlib.io/widget\",\"timingsV2\":{\"nextHopProtocol\":\"\",\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":145,\"domInteractive\":680,\"domComplete\":876,\"loadEventStart\":876,\"loadEventEnd\":878,\"transferSize\":0,\"decodedBodySize\":0},\"siteToken\":\"7df708fcfaa04a64ab3b5e86e310df5a\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://widget.coinlib.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qx3%2FlPRQESD4spgU7kn04BSSp7eyoIgxHfosw9Q3Vw9%2BOUzmG%2BF2%2BKpEICuKUTUexNl7CI74XeOHoUCc0w7jUXYXCT1RT7RoQna8VPRe9raJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d809306aa129ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 77160\r\ncf-ray: 9d809307dad195bd-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-12d68\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 147774\r\nexpires: Wed, 24 Feb 2027 10:11:05 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kDFQrcBgwJpmlBuDDuXBeCQMflsd%2FX8xOe%2BHo1bqWJEeqyB2zccXbrAwp%2F8koMVGIGUnm5Qv9nYi4dDm%2F2s96Bht2AWVMED7E56Z29YhGYlk%2BAGNWyOGFLEc5L2TvsfBCJKO02z0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-02T18:49:50.266519Z","times_seen":526411,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":92,"dns":1,"connect":0,"send":0,"wait":18,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/shape-16.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/shape-16.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11004\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 231, 8-bit/color RGBA, non-interlaced","md5":"7136ee67c797f7450a6720ac014a63b1","sha1":"943e98a6224953af6e0af71cea61d59c37d30580","sha256":"c17822db4e5382fac7d0c6547ee46173b276c543a50c1f565c44934383445456","sha512":"7e2066188c2b8c82dae951a9426a5d19ca36b8722956d9184446a78117f580b1ed4fc7b53dc260c0bb414e2709da86ffd2d9ca336b516e219ee2368e9b6f6c85","ssdeep":"192:JRr7ZtvZFb0Lo09XkTQx4y0eR+UFUYJFcbAJmy6wCg/VCxUv9HAJgv:nnZtvZhT09n4y02PFUi2bhwl/VxFHASv","tlshash":"b532af0aae770db16aace4e18dd61c0d752a14642328ec509369fbd7665407ec0a7ff1","first_seen":"2025-03-16T15:21:51.706996Z","last_seen":"2026-03-11T05:18:34.369501Z","times_seen":10,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:16.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://swiftrexpay.com/\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://swiftrexpay.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 06 Mar 2026 10:11:16 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":45,"dns":1,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/images/icons/cross-out.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/images/icons/cross-out.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clare.ai/wati/images/WATI_logo_square_2.png","fqdn":"cdn.clare.ai","domain":"clare.ai","tld":"ai"},"ip":{"addr":"172.66.173.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clare.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 16:16:35 GMT","end":"Sun, 24 May 2026 17:16:32 GMT"},"fingerprint":{"sha1":"5C:1B:90:CD:45:B9:F0:86:D6:84:A6:3F:65:96:83:9D:3E:1B:36:AD","sha256":"5C:F8:A9:02:A2:0F:58:1A:87:37:5E:D8:A6:1A:AC:3C:FA:24:ED:80:D9:FF:B2:0C:3A:3C:FF:39:BC:53:8C:E9"}}},"request":{"raw":"GET /wati/images/WATI_logo_square_2.png HTTP/1.1\r\nHost: cdn.clare.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 32611\r\nx-guploader-uploadid: AGQBYWzei5U2XUggWCDlKH2GpJpLFD-2fps0T80xhGkHG551W-grREH79OERX8ttJ-8zdxouPRlKZ4o\r\nx-goog-generation: 1691142069515975\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 32611\r\nx-goog-hash: crc32c=RjRZ8Q==, md5=ONTj9mTfCpdsMEIeJ1s2Lw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nexpires: Fri, 06 Mar 2026 10:56:15 GMT\r\ncache-control: public, max-age=14400\r\nage: 890\r\nlast-modified: Fri, 04 Aug 2023 09:41:09 GMT\r\netag: \"38d4e3f664df0a976c30421e275b362f\"\r\ncf-cache-status: HIT\r\ncf-ray: 9d8093089d18a106-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":32611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"38d4e3f664df0a976c30421e275b362f","sha1":"34cb0980a29f1d72af3d96399d795bc9a0d74e5d","sha256":"cf7a43a5284671b26248d937cea2319282059fdce0ee1a14d2b13f611be98f92","sha512":"1309e165d5cf586e59c95fb93388541855d818b4e57ad7c5a7706cd9d8ef3c28db67be36ea27f5ed9cbfc18bc712a18f726c2f6a2e8d019446f0887b3ee42c6d","ssdeep":"768:jtr/JDX7Hizn3xfHJJxhmboJdzDu72OBGYctO:v4nZH7xhHJQ29Ycc","tlshash":"21e2e816ca1125afa1661040b7db38d2d9714c937168ef4f5f82a23a8ac7bf0fd31e95","first_seen":"2023-08-12T15:42:11Z","last_seen":"2026-08-01T22:21:05.779853Z","times_seen":309,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 10:50:11 GMT\r\nexpires: Thu, 04 Mar 2027 10:50:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 170455\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-02T18:16:35.659417Z","times_seen":78592,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/bootstrap.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/bootstrap.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23299\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":197170,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (629)","md5":"df40d6e4c661bcd1790dce6861e34ce4","sha1":"8be76ce9cfd6388dad97d74ff292ed1dcfc0ee97","sha256":"038ecec312ff9c0374c9d8831534865fb7ed6df4c94ca822274cea0ae4cf0e1e","sha512":"f82d5c9afc390f43df9ba1adf5e9b7ce9dcec9e6c7338c28d390f7f1ad245e6ec2d4c45967da0f4db497dcaa11c400346f6a070aaadc2443e29225e3b0d5e0b7","ssdeep":"1536:BycclspGffCCU8W8z9WV64wpHeASzjN+QTzNo+uwwCrq9//zDL4iDF4jg:B5ECCU8zSwCM//zDL4iDF40","tlshash":"52145459fdf11408706b826c64d6b7f57b6d8087c61edeba7ae32124df493c18cb2988","first_seen":"2023-04-05T13:39:46Z","last_seen":"2026-07-31T05:59:29.495552Z","times_seen":1019,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/responsive.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/responsive.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3633\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7e788ce110602822de534ae9d28a8191","sha1":"e7d24948d5815aa0207dac0052f87d02f40aeac5","sha256":"22c3aa5e42bc4f879f5cf5518edaf43893c2a27b7a2487c7c6f5ae9c4bc53ba8","sha512":"d2bc2b2e0ab55dd4016f6094e21e3312c286384eee0e2029096e6aee161f3060e69619aef320ec54e9f1bf0ca4ae7374a8ee42cc5177e9a4c8e1d11aa527c548","ssdeep":"192:llZME6nTw/ZpqlVfSWQAhtye7QsnuIwpBsCr/QII0Yp07XeiFZkMBrKz9Sg:S5/Cdgf","tlshash":"50c2bdceb8a621457a427569dcfb275021b3d033da4ec6d2b9e2603dcf892d69cc1b4d","first_seen":"2024-09-20T21:40:15.886056Z","last_seen":"2026-07-27T10:32:54.761265Z","times_seen":28,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/project-7.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/project-7.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/owl.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/owl.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17911\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85303,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-08-02T12:26:42.48616Z","times_seen":4672,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_our.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/js/bundles/bundle_our.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=converter\u0026theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 18682\r\ncontent-type: application/javascript\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\netag: \"16211-5f8ae19e52980-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 17:18:46 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFKRc0eaTbMHzxmwyBWdbAz%2F3glnklbZNCQC%2BiBU8q5o7eb6oUYvO4BDukiih2b0b%2BvuHTP%2FhhmsqMJao9Pxp%2FpxhDI4c%2FiQfspCqoE7y6IE\"}]}\r\ncf-ray: 9d809302c9bd9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90641,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (403)","md5":"000b4aa1fdecdd7f05fac90a172bff2e","sha1":"83fe2b4a92fd967d4ae10a66ab9c9f7cfb8db75c","sha256":"b80e46aa15043724f1c2c9cffb3a41fa4540d2ab531feef3f127ce3b03170e1b","sha512":"59ae80276f20cc7a35b7299ca4a2705b38e44f2c579a8170a6d7795d4dde531bf25506696825037a65481f97b2434b25b232ec13560953699eb422c2b667e2a7","ssdeep":"768:/z5PUWzyZNKSzTuoDTE2E8jHVemd1Hsng3Oh8gvwZfeUnatOuOPGdjH/AAu5P/:9OZNKSI2E/mdFYoBZRhPWjYAu1","tlshash":"6193922de8f72031603371b98b7f61047a69a0274a44ed057e1c57d02f86ab8b6f5fad","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-12T20:21:40.115094Z","times_seen":2766,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/project-7.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/project-7.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 619\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 05:27:11 GMT\r\netag: \"b0abdaee81de6fc0c1fb3bbb150d752f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: DhSw4jflTfRWzx_2QFEwPJj8frqdVx4ChCtLOEBEaZJJ--zxGKjs_g==\r\nage: 17940\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b0abdaee81de6fc0c1fb3bbb150d752f","sha1":"e090189b43a9be7cacc2873045e0ab41dfcc5bc7","sha256":"1cddd83c4a977e459b4294d3fc77c28f77e51bfdfb6f468528d56f487a26e6a8","sha512":"dd3927e7750b3f66a0b23a626505d013048bccdbb0f535f4be7e251fade10dce0f3ac987c429b6c8179a6a1d7f72efebd48b9081417327d0c1a27a5e02763d30","ssdeep":"","tlshash":"4df0629bc6d00d88ea734a3e31d7a869fce10724c2761004ba1b88ff180a20c256934b","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-08-01T06:14:37.390821Z","times_seen":508,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":35,"connect":21,"send":0,"wait":12,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-109558606-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=UA-109558606-2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nexpires: Fri, 06 Mar 2026 10:11:04 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 06 Mar 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 119398\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344593,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"93627719ec9343bad72e2dca631b5312","sha1":"12f82956964a3352dbe85d256322106e2a91e6a5","sha256":"56bfedf5f36f8c58e00821fb500eadbca82e69a380dfdbecf8f241229aaf2537","sha512":"e218b4b9955cbcff462dd6f6db0188b4ea3b2a95b188523debac382230a88c789181948c310f1fe386a0ca0bfb2d98e2e3495d087b862fe992fc9f32e61fdbb8","ssdeep":"6144:GkKfNlg2vN5BaKI0D8RGI/+0sApXxXGZKWB8:G/FS2vMU8An2","tlshash":"1d7419cdb7d6706253a3a478403f018bb27a7892f84cc899f186d9d42e7469a8137f7d","first_seen":"2026-03-06T10:11:37.368161Z","last_seen":"2026-03-06T22:50:44.390616Z","times_seen":6,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":204,"dns":1,"connect":21,"send":0,"wait":37,"receive":64,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Mar 2026 10:30:29 GMT\r\nexpires: Wed, 03 Mar 2027 10:30:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 258037\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-02T18:16:35.635452Z","times_seen":56204,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://swiftrexpay.com/\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c71f1ce9b1d8f235b087d509a18d375fa98ff99e\r\nx-77-nzt: EwwBuUwJCgH3UwIAAAwBuUwKEwGzWQIAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: e2f754209232ccfd3aa8aa698476e71a\r\nx-77-cache: HIT\r\nx-77-age: 595\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e15688e9d2d002a9ed39b75b69eaf60","sha1":"8334c28b880997b2a4391aafde10a4b7463dfabc","sha256":"b094c3b5945028f864269d3d5af31e88f984e7ee5119a61ac716801e948caab7","sha512":"87c5e8e52504edf16fd6f7669e17287c6d8eace783fcbd020158b273c01dd38e75088c20f4b204c12906d7944507b6a120403cf63ab2307361cf844b821f8c92","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/YmzW:CgF/hcbWbYKZcF+jhqoWQmK","tlshash":"fce1b64f9a144ea987c6438276cfb84675bc807352509d7afd8cc8b842697cda3e3b94","first_seen":"2026-03-04T14:01:17.972897Z","last_seen":"2026-04-01T05:39:45.260246Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":48,"dns":20,"connect":7,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/fealty-cert.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/fealty-cert.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1513307\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1513307,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 2310x3264, components 3","md5":"2eac2cc3c4e0b8e04bc98399c67326fe","sha1":"b5e46982acfa34a042a6e23ca32b18d50a173327","sha256":"2d5b5c78aee4eca0485241407973eeae6601e8f73afcd0adde7fbe4286cb8cbd","sha512":"20da9696afb3f52fe86fcd2ebb0ab46dee2f5623a4d7039fc7cb155964ab2e78ef45515fe6a6421e0b2224e20238506c760bdacf3d0d140be744f94cd9b05bc5","ssdeep":"24576:58+nsrwndItwt9nxsNThHwAGKNeA3lc+J9HGZGX:JsrwdIerxsbYYRHX","tlshash":"c025231b08004e7782c85f797d6ac8549b087b79abc556b2828b9d5e33dca8f04b74fd","first_seen":"2026-03-06T10:11:37.372971Z","last_seen":"2026-03-06T11:12:13.413994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/color.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/color.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4261\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35858,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"98a9b4a1ef10efd75ebf8a16be75adec","sha1":"8fc4e05f657990afbc00732b4ddad708ca73c889","sha256":"7f594c8cdc606a4af32c0ff15484a6e96373f9982cea632b847ede883ed017aa","sha512":"2100c698352f0b490ba43ad7173bd1ddf0b8123c79da2791123f4ecd66d9b9c4eccf33c0a7a82fc6d8b70207859c8ecc42cb2cde261177c1660c4b68b18c947b","ssdeep":"192:8/h6xvzKBm/zwRTJba1KyGxrXrqN9ISOIpIGC9:8/h6x5zwH2WjwIrIpIGC9","tlshash":"c0f21094e6aa1c9e322b8b8d7487f2601b4dd4e9ef0d17d4f172802563dc1057eb9f8a","first_seen":"2025-11-13T04:01:50.128806Z","last_seen":"2026-03-11T05:18:34.401386Z","times_seen":7,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/rtl.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/rtl.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3865\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ee1c44b36aae7611c8852ca52fda424c","sha1":"e78023829fc1fbdc8ec29affa79305dfc151ee40","sha256":"161750d0c49583af44f48f7d8b28dd5cbbbff88a76adf11b0e8cacbda433f246","sha512":"68e220e08c07a96121dadb2a14bb9a77693e31e3f8c394b84f01d00f8b3cd905678acb6bdb51c3f53830cf53c796e026fd9fa2f3bc5a0579ed9526105b0eadd6","ssdeep":"96:rLjmLa7jOOP3mlkIQIkHvUbqaqMI2VHa4LkaNx+aYpRsETYEDZpmhGwhG1vQUkOK:z3xlM6Wxf6UhG9QUsBEHTN6J/B5Hd","tlshash":"dfe2bc9948ba1f5d336de187ecc5fae0154895a68ecf9080f6f2241ef8cd7910592f2e","first_seen":"2024-09-20T21:40:15.882931Z","last_seen":"2026-07-27T10:32:54.764402Z","times_seen":29,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.php","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.php HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rdparty-apis.coinmarketcap.com/v1/cryptocurrency/widget?id=1,3890,1027,1839,52,825,2010,74\u0026convert_id=2781","fqdn":"3rdparty-apis.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.123","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 22 May 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CF:1F:32:DB:10:D7:4D:B7:FE:87:55:5F:E2:BF:63:07:2D:8D:7D:F7","sha256":"82:A7:65:6E:3D:AA:21:D5:76:C7:53:AE:2D:9B:A7:6E:AB:6D:9F:E6:26:87:FA:2C:2D:E1:C1:11:08:0B:B8:47"}}},"request":{"raw":"GET /v1/cryptocurrency/widget?id=1,3890,1027,1839,52,825,2010,74\u0026convert_id=2781 HTTP/1.1\r\nHost: 3rdparty-apis.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nserver: Tengine\r\naccess-control-allow-credentials: false\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: WWW-Authenticate,Server-Authorization\r\ncache-control: max-age=30, must-revalidate\r\ncontent-encoding: gzip\r\nx-traefik-route: coinmarketcap-thirdparty-apis\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding,accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: U4w5vuU85fZb8DLCrTc0oDsoQ9dYRZsmTLTCjBkzNSByu4-4t7NXoQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8194,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"50f6d21f3d89077707244bec023a17f5","sha1":"71d675d3f0f97381a8ff9cce277f796a57dc7523","sha256":"3f316ca9d8cae884009d5641f8dc04386953fb0c9baddc88a4f94f43efb041a7","sha512":"ae6cd499b7ffeb7d12a3af55202dad8592dee622798a4074b19988712799e60c7f1f0f15d7846df969ba2f0332aeceb7871c0605ec0a8c085649dea27463d983","ssdeep":"96:IFqwIJKY2d0jY2+e3KUtABRJKY2dMJG30APoIF2V:IEvjYNmKNMXF2V","tlshash":"1cf1436703b51c76d57e556100033bc11c2cb0e6d88c1a9e26ed4aec81dafe75387bae","first_seen":"2026-03-06T10:11:37.379519Z","last_seen":"2026-03-06T10:11:37.379519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":111,"dns":1,"connect":12,"send":0,"wait":149,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/wow.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/wow.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2035\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269)","md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-08-02T12:26:42.51341Z","times_seen":3910,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testing9.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testing9.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141915\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141915,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1413x1059, components 3","md5":"70f64c3f067c69fcf88500beac85a418","sha1":"64f2240bf77ba1049418379939503292a144b6d6","sha256":"508d516505f25c3875ab5159e309dfd545032ae5176cea1061cff2b0e8073bc1","sha512":"1d05c8f6291e983cb8f88fe7da1cc8347b9cf018b6cbc77a7dd65f5c031cb13ca4c451c9966feb9a91be0da0daf664de8e2c4c1fdececcf8d556dbce888736de","ssdeep":"3072:Iw6Iy4+HmIpR5zMXW/hR8JZpeUj8fYWn7mZOvH8wMm:tXy4+XFMmUerPaZOvcS","tlshash":"1dd302130681eb43be3947e8fe430fcd4eea3798d56531e212a327cb751a1610e9c56e","first_seen":"2025-03-16T15:21:51.762334Z","last_seen":"2026-03-07T06:26:37.75893Z","times_seen":9,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/popper.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/popper.min.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6950\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20494,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20322)","md5":"c1d29c9b4fa7a8ee8417a01bc9ac1b56","sha1":"0c78c7993cba9ca26741f1df9735eb18d4c0e50d","sha256":"e074908c3749fe751173f181f33c7092f3a7b4de504dc12ebe072d537a7607c4","sha512":"142f2b7fa9dc007d01f6d44cc89eba587d7c47258bd3b2b4360359ab2345e822306e79588da16b9518728f4dc99a495990897ab800f8a3a7107f5fd0a8ed8eb2","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db9O:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO9O","tlshash":"2892a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-07-27T12:34:04.676907Z","times_seen":485,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/bootstrap.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/bootstrap.min.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15247\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60010,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59729)","md5":"61f338f870fcd0ff46362ef109d28533","sha1":"b3c116c65e6f053aaab45e5619a78ec00271a50f","sha256":"5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548","sha512":"8c2694d03a7721b303959e9fe9d4844129cead2b2e806e85e988a04569da822ec7a0e2ec845d64c312d3e3ec42651810b1336aa542a3e969963b1b2ef65dd444","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B0+:uoFXOCx0wNGaYk+","tlshash":"c143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","first_seen":"2023-03-07T01:02:23Z","last_seen":"2026-08-02T17:52:45.240696Z","times_seen":13767,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1573\r\nlast-modified: Mon, 07 Dec 2020 19:06:42 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 04:40:47 GMT\r\netag: \"9b9545b0e6a87b4aa1009f10f35c37d2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: XkJVIxP-mbX3V6_iOtpCjkujtWgQYN2HTf3JoNzI1g-0O3qdegCnIA==\r\nage: 20072\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9b9545b0e6a87b4aa1009f10f35c37d2","sha1":"f5f942a5ea3a33ffcfb3d1d6e64233571bf843b5","sha256":"2b6064887ef3e3f56b479f8ea7f09711dd735504e5ba4f937ca2243eed79ca08","sha512":"c1362e9f353251e39422b644d7505799b3ea07e211aaa19c589d52796731b30acabe903746b9a5aca5d114379084a4e24e81f3dee6c962f6e46465f5754d91f3","ssdeep":"","tlshash":"6c31c5e0efa18bf915198d329614f498d8ed1d99bf214aaf8b254016d5b10a8868eb3c","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-08-01T15:30:39.890885Z","times_seen":926,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":89,"dns":39,"connect":9,"send":0,"wait":13,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/script.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/script.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3478\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16536,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7751556f5c0f92b8218e406b40bedb27","sha1":"1cb42ba61a95f52e8fd616924f04d46002c01221","sha256":"008b9d03bb5f6c715c973cd710b411a1854b6abf31030d13727a3bda9c9929a5","sha512":"36e6d317f4b734aa533dc5f4549f88e7a88113d804049a0afd608281c5a7f6b6ade2a9f38cd18a1eb525c7dd8040eceb83fecaaa916fe3d8e506f33659ad3e6c","ssdeep":"384:YMZZnOKu26Y7jh5GO26xkeDFZ+g2JjkPii/1:R/OKz6Y7e4kkr+gUI6i/1","tlshash":"b17220c0f7bc25a3907b3195995ea1c52a7d0437c8426877fcbe15282fc971e36eae18","first_seen":"2025-03-16T15:21:51.736417Z","last_seen":"2026-07-27T10:32:54.783476Z","times_seen":21,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e153-4684\"\r\nexpires: Fri, 06 Mar 2026 10:13:06 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:23 GMT\r\nx-77-nzt: EwwBuUwJGwH3OAAAAAwBuUwKCQH3AQAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb5412331056b6738a8aa69453db01b\r\nx-77-cache: HIT\r\nx-77-age: 56\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":56,"dns":29,"connect":8,"send":0,"wait":8,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/shape-14.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/shape-14.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11021\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 231, 8-bit/color RGBA, non-interlaced","md5":"87ba665feb9de41c994d9a7c3365220b","sha1":"cfe5565f7ace1b3fc1fb191d9beeef8ad15f5884","sha256":"cd06fc0ae7644e2c015d1439d245b1270522d1fd75af55bec4275cf8b50231a6","sha512":"57f0cc311d64c9e8662b3522f557f89cc834748f667106aac2ebb4e87968938750fd972199164d6740345672679f2793129036f400c826fd4ffcb82bb1aa5d38","ssdeep":"192:Jd3QuYj2UvbEV8DzxlOXUtPt3jNJaGPOloJ0KBAnXggBw+oOE60se:rQuYNvbEixk4V3CGs5nwgBwJ6Q","tlshash":"9232d0da856803f376bbc5d60cb62095b8730552c7ead6fc66bfb81211a5cf0204e961","first_seen":"2025-08-02T08:49:44.577846Z","last_seen":"2026-07-27T13:29:31.62912Z","times_seen":19,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K638SKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-K638SKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nexpires: Fri, 06 Mar 2026 10:11:05 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 06 Mar 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 107464\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307271,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4318)","md5":"986fe5a69df8c72f762d2e2b8ead5058","sha1":"4c1a4a1c5a005bf0976b52389c6c23a655dab30d","sha256":"5448f06b30e0b3bb564f5e760455e367976e1b8937777895eef2852130c08fd8","sha512":"4c964354589553e7e79548100dff8c2bf35155a5025967e3ada2ccf205e4d61faee94fc4f3b488480355fd0798dd689c7ef7efe50d97bd310cb0d44377ad50ac","ssdeep":"6144:SkKfNlv2vN5BaKI0D8RGI/V0sApXxcZB+:S/Fd2vMU8Fw","tlshash":"4b6408cdb7d6b06243a3a478403f114bb23a7892f88cc894f186d9d56e746698237f7d","first_seen":"2026-03-06T10:11:37.38714Z","last_seen":"2026-03-06T22:43:21.127493Z","times_seen":5,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":182,"dns":13,"connect":7,"send":0,"wait":64,"receive":34,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testing3.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testing3.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2295043\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2295043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 6000x4000, components 3","md5":"bb330a652de32d481ef74b4aae166a86","sha1":"5185b5607bf4fa186a6a48d1119095b7c1785b18","sha256":"cb95ac969dc8f0a6f93afb26eaef3ba4c20b71ff593afd7263f3253447b59aa4","sha512":"07fbcdf6034a0389ab1884e8181418d3c83e8432220e62b2abbacb77ded849d8acdbb837f87fd99eb7b9b9b404cd2578200f98e18b01961d1f2b8b2b15a9bbd7","ssdeep":"24576:Eldxu6K5Y6ajd+XnadBLBuy+DM5DATco6lP0v:EldxDoY6qd+WjuygF6av","tlshash":"cc25332630b127a5ea1252b0fb97675be356e8e1fe56e01fcc191cadc4c129ffa07412","first_seen":"2025-11-16T04:01:33.842174Z","last_seen":"2026-07-25T06:04:13.512477Z","times_seen":8,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/52.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/52.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1344\r\nlast-modified: Mon, 07 Dec 2020 19:11:36 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 00:47:15 GMT\r\netag: \"3007f572f2d1d29b8c9bf993608742dd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6AJuutiDbEkb-Bc3ck_HG6Jf0RgyP9UgS4qqJyYqsTCvAbZTVGrJGg==\r\nage: 34352\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3007f572f2d1d29b8c9bf993608742dd","sha1":"96806f51a39b29e1d5c0d38355e1d464a0b3d750","sha256":"81adb16c8bb35872dda383ce3a44a4c88acab45aeebd14352ae9fee24582651b","sha512":"2e77e11a36468c310ba525bd1388173531bec06f68ec5516a54d2682e4175b1cae796337c47c2c567d2509645b81150f237a5d34770dd768fac82a9dc3865802","ssdeep":"","tlshash":"f521b6cae2b28e69fb322af6832e4451add379391d72c806881832b11c112f2997dd58","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-08-01T06:14:37.383917Z","times_seen":623,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":95,"dns":38,"connect":10,"send":0,"wait":14,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/font-awesome-all.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/font-awesome-all.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10929\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (318)","md5":"e0230d825b36d28608b9eedf044fb400","sha1":"d00d5962bf99d1ef87fa0ccb3ea6cf0853ef9921","sha256":"18a7b5f0c1f0ea75ea6f10e0aa067aeca2f8875deed0f0f6fbb7f45d88549d49","sha512":"f85dd363a4a055f00b72fb84830f585459184e3ca1893c87f7afd20229c8c43db793cffa7df6dd774913b2588a60770c208d457fde01aa57a5e59b16fd35f0ca","ssdeep":"768:MoUii/ukQKZaAvlAk86JsTODNnYw0/30K0lya2jCs:Mdii/lZ7lAk8IsaDNnYwSN0lUb","tlshash":"3053fdfee1ff10944311e0812743e3e0b729b66cac8a4c98d2a67d9df1d165ca186bdd","first_seen":"2025-11-13T04:01:50.102024Z","last_seen":"2026-03-11T05:18:34.392244Z","times_seen":7,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e6341","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:05.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=G-NB117S8EJD\u0026cx=c\u0026gtm=4e6341 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nexpires: Fri, 06 Mar 2026 10:11:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140608\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410351,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"7f62e5c37e24ae63894f2b25eb4080c1","sha1":"5bb2eaa0bb4dae65f7bd915ec71fd15c5a30aa4f","sha256":"da4c7a36908e776a7963fb0a3e22af9ec56f7884c834d98ae9b78a9f9d0577cc","sha512":"4458c861f8971be52e8fce0a25c62daee8c7b312c9b78cba2019b2b98d4051f5e41785e8b4a003c4288d25fc9e95e89c95df957c529d56f811f0011b268916ca","ssdeep":"6144:8ekKfNl3H2vNQBaKI0SfZ8RGw/V0sApXxoZyiJz:l/FxH2vnDfZ8Bz","tlshash":"c59419cdb3c6702253a6f478503f018ba57b68a2b48cc899f189dcd46e7469a8137f7d","first_seen":"2026-03-06T10:11:37.39239Z","last_seen":"2026-03-06T22:50:44.423187Z","times_seen":5,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/owl.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/owl.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1202\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a2b37f6ee585a7a6275657f6465de19c","sha1":"a8add7a09817a0e906b1fca8e2edc4314d52db9c","sha256":"f3ae1868271d210fc0899711fb599754b60373c24c5789338151c8a1de0cd2aa","sha512":"3947549a4d553b68fbe5c536ab54a4a4f7168a298d87526c81160aec12ecde79a427f47a0e08dd3abd4d7ed403c38ab3d0507c443ed46044acc8aea35946b12c","ssdeep":"96:15+VPKCDemllo7PZ2RUPKuT+8F/pgvYGuC1lrhxfr5BEO:15+VPKChleHT+ypgT1Rhxz5B/","tlshash":"f9b1ede81276114d342b83e81a9d571a3b3dd452e909cc58b6eb26098fcef58602fb5b","first_seen":"2023-10-19T16:16:35Z","last_seen":"2026-07-31T05:59:29.524946Z","times_seen":72,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/images/shape-11.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/images/shape-11.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/contact-1.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/contact-1.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 198813\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":198813,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x867, components 3","md5":"a23873d5f8ccba9d7db34f2b5359601e","sha1":"f0d0d0e4814e5bf1d04123c9e497ef13bd84178f","sha256":"7ea25e7135392a2892a34dcd079f570df150cba2656df93f335c1cd20b4fc029","sha512":"8f15fd2d31ce374587c3f6e9893fe620eb42f211920732c0cd1a1f4e2774a0602427e916abcc990f97bc1d49435ab9b141f354456654ddd78457f025b10c5a5c","ssdeep":"3072:sybme+lNExSaxGjo5dUm5moKmeEBPs2Hf3gPIldhF1CBK0H63hL4+VEPvueno:v+lCx6o3nMlmHIPyRMAhL4+uPW8o","tlshash":"321423a53fb673bd21ab26758fdce8e7367e13d5240caec0aba132e3b09452414d5358","first_seen":"2024-12-01T22:57:02.656282Z","last_seen":"2026-07-27T10:32:54.805231Z","times_seen":29,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":740,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/images/favicon.ico","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/images/favicon.ico HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/%7b%25%20static%20%27assets/css/animate.php","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /%7b%25%20static%20%27assets/css/animate.php HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/service-2.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/service-2.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67290\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x300, components 3","md5":"878d649032587efb872e9cdfe45060d1","sha1":"aba8a85b7dde899d774d4895081f77d2f90cf218","sha256":"c3c2f03c3be26783783703499566fccb9aa69287b84b5bdbae80a599b5fe1cd6","sha512":"2e5861dbddde7423220249d9e7fe23e1fada8d0b37f3c667c8e0cb97c6e517941c2f7382052a31aaadd4ce0441a44bd4179d2bfac429fb2a412e3f187d6b96c3","ssdeep":"1536:Zh9rhnpRNQOOQTIVoMAwTti8S9XA52RiR4C9rBXwO+VBi1:LNB/HlTeoM3ti2Qq9xT+VBi1","tlshash":"826302e6799f958abce9db55abb80ba70352c5f8b1d580c8f18444b6e8dc0add5c2032","first_seen":"2024-12-01T22:57:02.627105Z","last_seen":"2026-07-27T10:32:54.772963Z","times_seen":23,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.fancybox.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/jquery.fancybox.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34739\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154104,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-02T12:26:42.512028Z","times_seen":3546,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/TweenMax.min.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/TweenMax.min.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38559\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115897,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32043)","md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-08-02T16:46:21.650109Z","times_seen":2766,"resource_available":true,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":659,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/images/icons/preloader.html","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/images/icons/preloader.html HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/webfonts/proximanova-semibold-webfont.woff2","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:05.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/webfonts/proximanova-semibold-webfont.woff2 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/static/css/merged-widget-style.css?25799\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 33124\r\ncontent-type: font/woff2\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\netag: \"8164-5f70afa528940\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nx-robots-tag: noindex, nofollow\r\nage: 3258\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Vr8TVnfzpApiQ0Ymu8ukgZcOuNngkru3EyxegzFILAQm1YxBVZO5f42UzlMreeqZJ3fXvOj7R9ruQBg%2FicNt%2BG7LUVvDxtrKiqgcPPZhV34\"}]}\r\ncf-ray: 9d80930549f69ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 33124, version 3.917","md5":"fdda429a1a07541b0bb84ad21d01be10","sha1":"2db29ef19561eff816a5aaf28d069420511ca03d","sha256":"ae55c313220f063fdb3dc157a89a22e6a20a400cdd5b639a5aabfa4ae91e476a","sha512":"fbcad7a1cb265e90d7dd3a1685e6b28b28ca42ea7313c82769debf013c26d4f50f89700d6601450e1c065659a78fbdbf355aef573ae3b9b86a7b37698456afb5","ssdeep":"768:kN7vTV7/L5e897e3qf9h73sTv+nZDym77GWbJkr:kN7VTde3aw+hBegu","tlshash":"9de2f15ac3119ea2bb2947705f923c819536ea5486bd78cd3306cf74de74422bc79387","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-07-12T20:21:40.047407Z","times_seen":2799,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/searchable_items_json?converter=1\u0026json","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:05.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /searchable_items_json?converter=1\u0026json HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=converter\u0026theme=light\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: must-revalidate\r\ncontent-type: application/json\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nset-cookie: IDENTITY=1ac7b3d6ee86fbf97e9fe345c9449453fcc6f211\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: User-Agent\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex, nofollow\r\nx-xss-protection: 1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0j2Ili%2BrG6qjey3A4pSJlt8cHh9M01hKWSa5qvty1pfvRPbkVTFD1msjPNgOBlM4z0yo8w46YgXQJ%2F8ngP1fG%2BznvWGJLJvKM1wuRzyrTzs\"}]}\r\ncf-ray: 9d80930569fb9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29636,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d6d5e7f1c31d83edc4b4a2dce685645e","sha1":"379af01ec86d61f1b6d449949736383d31103aaa","sha256":"cf21fae241825cd39e254c4c5930b4e2f8303a0306e4140872cb0196c3e0a417","sha512":"63217ad7be79616db6af54df72a6b75f6565e63974d60067ae56f9e1f668a1c358627119fcc468b126c21ae5a3b2f49751229e24b955f95d79212f9252b57bad","ssdeep":"384:B2jV2CyXMEUjbkOUg51huTSZopkI6KVW4fLbCJQ1+ox5vPuc3DN5U:YWegRVW4yJQgoxFtzs","tlshash":"aad274cf7664aeaf9520e9e30e83afec39167402b089ac8d74d1498d42c4ed4557b37b","first_seen":"2026-03-06T10:11:37.397675Z","last_seen":"2026-03-06T11:12:13.442146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testimonial-3.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testimonial-3.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11716\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"09b77f0b78a71e30b2da0a23c46405a2","sha1":"d045f00d73ee89544061517d4c70de2be49dede5","sha256":"e76d8353cec3035ceb84b9d1da41eac4f723f3d231fc30d12b62b1b5d4eaf6c3","sha512":"f4a0ca917f86d07479536a2283ed306a1d575a61aa963add0b436a97ac7b8df36516286b82467925d42aac280b053a44f987ba0b38b12bf81603bb1e5daa2607","ssdeep":"192:E1csKFU5t0ZjqVr1Jdof8LEZxZ/P00FbKV0bETBPmvnU6a0dsIR4YUmt+QWyyht4:E1csKuP0Z+VpHW8LE/ZnoVYEdPgnUN03","tlshash":"9932d01086422980e88452f735b0d53bf1a1d6901eb8baf9ec2ba0457f3c4f6689dcf6","first_seen":"2025-03-12T12:24:47.503025Z","last_seen":"2026-07-05T04:15:40.064102Z","times_seen":31,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.countTo.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/jquery.countTo.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 925\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3466,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5ac11c01ea3885061ce1d564f6a4f7ad","sha1":"7c84e8385d0a002034af9700cd382e8f0f4a2e7b","sha256":"65800a729f583f1366785a9890e856396f4563f7b1b2d3b8ea4e275950a65d5e","sha512":"2fe757a0ade65de9718fd5470db991683e3e80ece2d5970c85442eff8e4ac1b3d9aa900709d54847726a2b1c77eea498ce8a6c760570842bd1df908cf2d96b43","ssdeep":"","tlshash":"43615e09bbab2211955b20dd5f5f114c3274932b184b8548799d93c08fa6c39e69bfbc","first_seen":"2023-03-07T01:10:19Z","last_seen":"2026-08-02T15:32:38.789245Z","times_seen":2003,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/css/merged-widget-style.css?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/css/merged-widget-style.css?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=converter\u0026theme=light\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 14809\r\ncontent-type: text/css\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\netag: \"13a14-5f89b5974cf00-gzip\"\r\nlast-modified: Wed, 05 Apr 2023 18:56:28 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKZh79lDmCIWs1ijozy7lIkcrFQNrwiCr%2BOKHW52pTFL6BJ1wuPwRtSQuSkoQx%2BidoP18KqSQi4Z8nlLPwiF9pR6I5Q00H2nPxnnA%2Bz8jL3O\"}]}\r\ncf-ray: 9d809302c9bc9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80404,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65356)","md5":"28bd4be37fdf2213a32eaadad9f0dd18","sha1":"291514eeba5a75459e474d4873a29ebb3d18de8a","sha256":"46fd83a7ec1d27a1e09a5fa35a5eb29a729b77e1e606c6693c1ac45e69dc5c24","sha512":"7143f467aaa16489810117557970e0f1a4c1315e790c036600f158a6c26a01655dc815867d63a1cfedd795bf93fa8fcdb8ce18c4349b5e10a83247b5ca7aed07","ssdeep":"1536:wPiYVZxYXeRCV37exCwC1yJOT6Pc8E3rKUtix:CiXht7XS","tlshash":"70739552e540211ff0178559f584bee9366dd593f60a0bbffe7932b08e465ab2a33b00","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-06-09T00:21:53.222382Z","times_seen":2759,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/6a5fdb6036cdb5e106226e9c4419a1d439f75ea6.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/6a5fdb6036cdb5e106226e9c4419a1d439f75ea6.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":189,"dns":17,"connect":25,"send":0,"wait":23,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testimonial-4.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testimonial-4.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/74.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/74.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1513\r\nlast-modified: Fri, 14 May 2021 01:41:04 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 05:11:09 GMT\r\netag: \"ad8faf0475a17ef069e1d7536e44a561\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: CpGWI2nrIwNNlMsBhzBI32_kcs73icgk5Co4Nej0zaHuoh5wOhUnuw==\r\nage: 18071\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ad8faf0475a17ef069e1d7536e44a561","sha1":"eeb366c51cd2e47d736e2b392cef82a9b4b5a34b","sha256":"89d53a240127fb371f01855b2ca02c0fc46f4f9be520229eb414b1ed1f3489af","sha512":"de6e0f423794a09ff56af8c0e355ff91d75e52c8d37dbffd405fa37c63fd1f4d3b6f143294ce452afa74ccf920687620689431d5f55d6bc3fd96bfdb9884fa97","ssdeep":"","tlshash":"9b31dac697517e13d23ea513a5108139a8132c42db18ae4c1e3accec3b108be54047a3","first_seen":"2023-05-04T14:40:13Z","last_seen":"2026-08-01T06:14:37.319629Z","times_seen":290,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":100,"dns":37,"connect":11,"send":0,"wait":14,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-c5ThC_K-.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-c5ThC_K-.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:06 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69a543fc-453a9\"\r\nexpires: Tue, 02 Mar 2027 08:04:17 GMT\r\nlast-modified: Mon, 02 Mar 2026 08:02:04 GMT\r\nx-77-nzt: EwwBuUwJGwH3oGMFAAwBuUwKCQH3GQAAAAwBw7WvBgG3AAAAAA\r\nx-77-nzt-ray: fdb541236efd5da13aa8aa6901ac750f\r\nx-77-cache: HIT\r\nx-77-age: 353184\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"fcd469aa001be1dfd30d0962c705391c","sha1":"87b8c021a1232a7ba7cd2d482113782215313b9f","sha256":"df06e0821c7c9aaa47dc040afcefc59ff8743c8beec02bed3ce656cfa9163020","sha512":"1c344e4bea46a7c81544ced75a2c75c38aa64ad7ddf395c1a0beb293373d339fbb4aea0b0b13864028be791060a40eb12d557d01c7e13169264712b416f91304","ssdeep":"6144:AsJU8SN+jtxjR/ZgQub5/rLmPh+WVcq9kNp:AwU8SN1b5/rL+HV3up","tlshash":"5e544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-03-02T08:25:26.037318Z","last_seen":"2026-03-10T05:00:21.849653Z","times_seen":431,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/webfonts/proximanova-regular-webfont.woff2","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:05.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/webfonts/proximanova-regular-webfont.woff2 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/static/css/merged-widget-style.css?25799\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 32688\r\ncontent-type: font/woff2\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\netag: \"7fb0-5f70afa528940\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nx-robots-tag: noindex, nofollow\r\nage: 3258\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fk8Q6D%2FNElHwjwFwkQZRTft%2Bl8mGSJJmMQKXrf00VtWU6M2jTxbX%2FNdb2BvJAojEQzYYL8gEbOeNi%2BT3RmiZ5Q1DrC%2F1JW7nJp%2FO7rFNsLdE\"}]}\r\ncf-ray: 9d80930549f79ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 32688, version 3.917","md5":"cf4a3df7970f0b16199e148034bb2c37","sha1":"f5501fb2d774e46756b23f034ebb5890c0dbf2a8","sha256":"ceb4ce0bba67a12e21af094eb24293d7ea8bffaffc237a1cd90394c7588eaec9","sha512":"e5e7c7b238f6927a5fab2b1b80210ab1e5be8d86a5bc93328084dd17edfcc5580c3d42a32e051679b28c100977a5d37304e81f0a5d8e7dd2b35f453fe5383497","ssdeep":"768:aql0Gwnrpz7x1Zj5sTzCbxiOJ9Yyv6uWSuCtjeruUm:aqlkz7xps4iiT6ZzYv","tlshash":"63e2f247c8820efc3f84423de6767153b5aa8351749be21799fba9740aeba2edc51900","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-07-31T19:30:35.650226Z","times_seen":2881,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/jquery.fancybox.min.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2938\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13735,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"35d290afd71a6053d8195ea13170b4e9","sha1":"a64676403bb5c23f9800963b0b8f0475b532601f","sha256":"e467f75601e845da217ae845b688b227a19fbf1e8fc776a42a4905869496d2e2","sha512":"0136028681f47450835a9bd6345bb647c95f2be3e963980e5b5e355f3cdc602772313640c5d9b72ae71252bbe8099b11de5663f3fde49b71a5170e42959f7788","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"b0524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-02T12:26:42.485686Z","times_seen":7048,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/style.css","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/style.css HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29589\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":260728,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"baf123b6976c57085b644a29b9a2a4e6","sha1":"3d80ad29445984797b230336df3958749a3ad3c6","sha256":"88ed9abbcd622b0ededf5a0539a366ece830cfb097c8c6a6c630b3a813036bed","sha512":"e3bce96217f97abc214ab027f806a257ebe89bd433e280471ab0a45dd7c91bc54af34178b47cbb1f78dcfdc1417f960bbf325a6617af820f5a1678f652fe5980","ssdeep":"6144:CSALgL4S1RDbPHRs5+VEc6rjr7fP4e+mzEUwV/8fzU0F5QsWp:CSALgL4S1RDbPHRs5+VEc6rjr7fP4e+5","tlshash":"61444ed992761944261bd79968c36759223c90a2ea1fc0ace7f3601cdecd7d811a3f8f","first_seen":"2025-11-13T04:01:50.191042Z","last_seen":"2026-03-11T05:18:34.377715Z","times_seen":6,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80912,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"7635875b85f90ce70f7383ad21a4e127","sha1":"3a5c7551706665f9f422f828aa45cbe740728c43","sha256":"967655ed54fb3c8bef8ab0ab5e56453adddb2136a5243f113e20f2ca446597b5","sha512":"b78632ed30e0168e1d31252a7a80cdba7679a18c97a9068a32a81e5241a44f7c54431379c9ed884e86210e3daba9f9c8196327fb7b261017c1adcfba39bb4356","ssdeep":"1536:X0wM4NPg8wjMvLUJRLwqKMO7w3FQNUpEzCduiQUKiZwNWij:X+jMowqKM4w3FdrKiYj","tlshash":"9483b78cb6a675668367f5b5412f000eb23f599df8084cbcb288d8e1adb5948413bf7d","first_seen":"2026-03-06T10:04:43.264335Z","last_seen":"2026-03-06T10:38:27.809678Z","times_seen":7,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":126,"dns":20,"connect":21,"send":0,"wait":41,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testimonial-1.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testimonial-1.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12984\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"347e9effd64a6ff635dbc116467683d7","sha1":"ee53cdbb4df00ebe8c4514c7a9e4d5dd1a9aa15d","sha256":"c67d03fb76fecea1e35b4ac10377ec7d1074bd294089dedc2825c849f8b5b823","sha512":"098ddf1f57e0060772e977d03088d44d089b2f2d9cd0d5e4ef8fa4a83d9a8a0bf7318e4c3b9f469861f9c1e2667d140d9e987cca6c20ac00443a72578b0756c1","ssdeep":"384:n/E5RF39T8q8gXrGYUmDT0ggK+4LP4D2Rj:cbH9XdDT0ggK+4hj","tlshash":"1e42c09284866604d381e9a037dd62b92f3c90907fc7f9a8049fd5ae4cc74b9526ef4f","first_seen":"2025-03-12T12:24:47.445664Z","last_seen":"2026-07-05T04:15:39.978356Z","times_seen":31,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/images/shape-10.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/images/shape-10.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/project-8.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/project-8.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260304","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260304 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 06 Mar 2026 10:11:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: script-src 'nonce-3l8agpmsDdbzxpvthRMSkQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw1ZBiEOLh2HVh1Vk2gRvzby1nVFJKyi-MLylKzCvOSSxJLU4tKkstijcyMDIzMDYw1jMwjy8wAAAntRLr\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=32.SE=15FEf9oulFmVMKEpRHcXWEitV50pLfD8iPBhbjxx9anYY_hlKBZKQDJukx0fUJktqGvgpSMIAvfCQVe2SU2TDVVJ93z2Y3yLGPEhSSTtTEs4AcHQN0NnbAHzsD63mjizziqSgEOxDt6XamJIXh6o78mqlL2cWN7T_ZHFW07yZ3CSKArDQ6OkVAfR4YlTCRCM6ZBWjwrYkfHAcq162owj3lmWfT7LbZsb2x-MnWz61c4mRo5S5YdqkQ; expires=Tue, 06-Apr-2027 02:29:24 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/circle-progress.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/circle-progress.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3458\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14238,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6816a923a10ae7680223d740150448a5","sha1":"d0b3b3b1b28f8d0585fc44cb455a9f029bc79684","sha256":"8e66938dc60763b5706ce779ca119e9eda349c2e8aa8136ca1bc72666be13128","sha512":"8d18914c0f210ffb905a11adc1b9558c06b8b7b03bd4fa52915248b01a16e400fc9422ff4769cb9f207b515bc826dab6a9de6abbf6645c72e5544a6185a5294e","ssdeep":"192:RnenM5DZLpkvR60Nkzx35Ia7yIAR/+SbA1wg1RobQW4z1N6qaHq50pd0lOhCOUKT:KmnwrJBHq5ad0liZPeem4uVw","tlshash":"5552501a9ef704679417e4394baf1141ea61520f6a0aed9c3c6c63b40f58b3143bebf8","first_seen":"2023-03-07T12:40:48Z","last_seen":"2026-08-02T11:16:24.527678Z","times_seen":5849,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/info-2.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/info-2.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 118813\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":118813,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x554, components 3","md5":"c2e56f385c961b68edd922ab069f0f4a","sha1":"f2f32da4f47fe93e670f9cbabbef132453ecd858","sha256":"52d1e6eb0fadf0138787c4adaea647c1e7b2d3238c0594db5ebb804766218150","sha512":"72be187804d69698218f622101fb697815f019f5f6e1d6457ca1d8a6195d7b662a85ddc6405897e971787d5dc1d17e12f30ead5c8c6d4ac0a1b4e7e54b966f3d","ssdeep":"3072:fZPttD4rZMtb+cwdTfDxCTi+Nuj++JYDfO0pygoSR:hPtt8ywltCTFNuj+8YDxyyR","tlshash":"3ec302de38871642a195fa6efef24837b221f9f280ca0557aa558b249c5b32f51df310","first_seen":"2024-12-01T22:57:02.648436Z","last_seen":"2026-07-27T10:32:54.785448Z","times_seen":18,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":367,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testimonial-2.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testimonial-2.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11963\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"4cde52d57db77f2843fec63983113840","sha1":"5e2b924ee097de8ca741b02371d45dbc0d957fd4","sha256":"15ed99756aed7d625f182d908c88ad4a32348956e1cf39fb4967027482877391","sha512":"6f9c443db37db0a2c649841e6d8826775c107dc7c1d43c342d6771efeece9c5a46e92f265dc9072a045803b8e835f0b478944879d226b54c4fad9f6066334f46","ssdeep":"192:WS4Sgd0BhjhJxMUnv3kUj9wxYxMiR47SoJ/xR2OqZOpz9aQjbPWTc4qAQlGJc:VgixMWcU6kIgg9aQXAc4qAQ8c","tlshash":"6f32be9a28c99d52180715ca37dfe62ac8ea7be0f891ee65b39778ab71604e102315c0","first_seen":"2025-03-12T12:24:47.482915Z","last_seen":"2026-07-05T04:15:40.014519Z","times_seen":31,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/fonts/fa-regular-400.woff2","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/font-awesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/fonts/fa-solid-900.woff","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/fonts/fa-solid-900.woff HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/font-awesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 20:03:43 GMT\r\nexpires: Thu, 04 Mar 2027 20:03:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 137243\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-02T18:16:35.636625Z","times_seen":73658,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.coinmarketcap.com/static/widget/coinMarquee.js","fqdn":"files.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"108.157.229.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/widget/coinMarquee.js HTTP/1.1\r\nHost: files.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 58991\r\ndate: Thu, 05 Mar 2026 23:28:34 GMT\r\nlast-modified: Tue, 23 Feb 2021 08:31:52 GMT\r\netag: \"7046f8f1f574e5f2da66f6cb5ba73b61\"\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 930c2e58be2ae5a0faf6f308189d2776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: JWjvNU7qvNyY3YfjofYH-JgfoQxdhVbr1arcIy019KpgUBk00uatDg==\r\nage: 38551\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58991,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58900), with no line terminators","md5":"7046f8f1f574e5f2da66f6cb5ba73b61","sha1":"f1d4f8820ce85f44bf92f39df949f12142747f94","sha256":"42ddd8b89cd2f3acae38059fec042e4f4f1d7ef0c5c33fc613f8d1afc9512b6d","sha512":"3b9c4ec5663e952511cb6d7298230603c1ddba8eed390e5950c13e0510d2a7b9c9758713dc1a2e7f7a1146528319db1a4affc9adf4634263747049e967201bfe","ssdeep":"768:6M4hcNGbZ7EX8bKkFHCTP9eyXp+VeRr+HcAYkF/Knf4VZELk+CuIZELk+CuX4scS:69UsZ7EX8bK+H+3vw+CJ+Ck40","tlshash":"dc4319da72c1b5de02a3f3b5542b0205a23e3e79748dc651f614dec2ae7b46c8613e38","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-08-01T06:14:37.394825Z","times_seen":702,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":171,"dns":112,"connect":10,"send":0,"wait":32,"receive":9,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/nav-tool.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/nav-tool.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 318\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1086), with no line terminators","md5":"e28a1be506d3151bad02d20a7751f09c","sha1":"d0a106cd4d593b36c86c3740d26b6d332c740207","sha256":"e35de31330187c0f62603f8b770e2969cbc3fe0d885aa02c7dcdd6fbe5134691","sha512":"e7faae5c7937eb0e2569b90d0dd804b6f0a5c72d30f148770f36c5bde1fec88fe412be41416f91d1caf5fdf6a07059a31119673bdd003ec9f70789eeb9c84455","ssdeep":"","tlshash":"ae11aa68b830e2fd01fb631930139e40c23a0dc5ca2c1d95982019882e6bdcf41eb7fe","first_seen":"2023-03-07T12:02:54Z","last_seen":"2026-07-31T11:56:19.148695Z","times_seen":943,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 23:47:46 GMT\r\nexpires: Thu, 04 Mar 2027 23:47:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 123798\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":103,"dns":1,"connect":21,"send":0,"wait":24,"receive":1,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/shape-15.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/shape-15.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11099\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 231, 8-bit/color RGBA, non-interlaced","md5":"1fe508084344776e037f76f79f48a89b","sha1":"155fbdc83a9edb55dbc81a841ef0aa35660dbf35","sha256":"77f608aa8f76cf533314103dc20eb172cdce4a06a0aae2ab91020be5dfa18718","sha512":"3d570a69ee0b049e768020b8e842bf5812d2d9d0573501b7bfa4333e25054fac9abfc4d989932db85c5a84208ba30cdff3b52c8a33b1ff691093e8c5dfc06fc1","ssdeep":"192:JnKmIQkQvwZvkxgtGF3c1rVukliQvdsY4WfitLyOpWyn:gmIrlBugt03c/BliQvKmit6yn","tlshash":"5f32bf05b206ef123a8ba4421a7b32b1e6060920f5bc05846c4faad7f3765df4df968c","first_seen":"2025-11-13T04:01:50.16391Z","last_seen":"2026-07-27T10:32:54.794727Z","times_seen":14,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/js/bundles/bundle_lib.js?25799","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:04.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/js/bundles/bundle_lib.js?25799 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/widget?type=converter\u0026theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\netag: \"56406-5f8ae19e52980-gzip\"\r\nlast-modified: Thu, 06 Apr 2023 17:18:46 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aufHEM7l6lzG6xej1W969F9NzjRr698Y%2F0ry5EM5aVNdgEXhjK0cQTI1XFOEs4OJutHN%2BtCq4jqzT9HK097C0EiDbn6VtWXUfnsPN27jizEu\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d809302c9bb9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"9a781036bff64b8fdb1f64d73a110c40","sha1":"5b9f645eea9d940f98aefe62a2ebb215a1b1b419","sha256":"d5a4117a99579fbd511260552f0d103d3c3c9e983889d853ab245d95dd9ca7e3","sha512":"991c5ff93e85e56777fab81a4f68c5b1a89da86e277b84d9d5f4c0fa032fa646cec282fded57a00f7636fcfa2eda10fd8c83faa89b98963b2d1996434687512c","ssdeep":"6144:9RzEOQ0+iea98Hr9STVvCgfkvGnxjR9aSrp7wwL0kYlP:cOz+iiSTVv7oGjw2eBlP","tlshash":"53741a8d72a2707182bb307a456f410fb13a946f6409c8a4f56cc5e82fb8d6c61b7f79","first_seen":"2023-04-12T01:19:26Z","last_seen":"2026-07-05T18:53:23.091465Z","times_seen":2759,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/a076d05399.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /a076d05399.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d80930649520731-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wati-integration-service.clare.ai/ShopifyWidget/shopifyWidget.js?1817","fqdn":"wati-integration-service.clare.ai","domain":"clare.ai","tld":"ai"},"ip":{"addr":"172.66.173.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clare.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 16:16:35 GMT","end":"Sun, 24 May 2026 17:16:32 GMT"},"fingerprint":{"sha1":"5C:1B:90:CD:45:B9:F0:86:D6:84:A6:3F:65:96:83:9D:3E:1B:36:AD","sha256":"5C:F8:A9:02:A2:0F:58:1A:87:37:5E:D8:A6:1A:AC:3C:FA:24:ED:80:D9:FF:B2:0C:3A:3C:FF:39:BC:53:8C:E9"}}},"request":{"raw":"GET /ShopifyWidget/shopifyWidget.js?1817 HTTP/1.1\r\nHost: wati-integration-service.clare.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1dc513fc72298e1\"\r\nlast-modified: Sun, 09 Nov 2025 06:12:08 GMT\r\ncontent-encoding: gzip\r\nage: 4569\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9d809307ebb9a106-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13537,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1464)","md5":"9a0640e91730cfae6f12d54d88b47a5d","sha1":"810aa04709673072f5a0cdc68b9b827f703559c2","sha256":"2d5df1f86ad362ad342d3b15dced013e89888336cb1120b26a323be0c9d7d285","sha512":"1df9b11516fd5f1eb86ac91dab29410c061a4a87dce30a7f93d512ca428d5fba9149f9d57e732025fe5ec61da269ff26b740db817e1599f811707a4944104e69","ssdeep":"192:TNzz7VccWGfv37rfzWmgAdc3UL9NpjilrSiZ4a/3pAW/ky+RTq91CVudSvJvSv21:xzHVPXfamgAmmbQrSBU2NZmRmKg5kDWR","tlshash":"a55284b542a3101470d7a0a89be93b8517318097dc05fc793bed9ba49fdbac8a5d3f24","first_seen":"2025-04-01T14:26:20.064813Z","last_seen":"2026-07-27T13:22:00.22012Z","times_seen":417,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":112,"dns":23,"connect":8,"send":0,"wait":20,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/service-1.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/service-1.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65935\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65935,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x300, components 3","md5":"514aa6019fd1ffebbfcbd07373b1e5f6","sha1":"e89753583c332a640a708293057a1b74cd0adb1d","sha256":"65a990664dec3d4909d0462137abcb77b15ba5fd0bce351ee61f86538a66201e","sha512":"3abe06d4fb47dc304c2693ad06ec9a8d8201c2f7bf22c77b0ba6c92d4f6df1ccae1784b54d63b339b36ed785e1cebffbc4531aff8ddcd17764b2f41d4809df19","ssdeep":"1536:sFyYqLC+AVXP8HYl2W0gk4LMgkP3kf83jBHjI9HonBou:sFyY0YPMYFvLMg23kiDIVonBou","tlshash":"3a53020f7111f027d50a7bd2c4eb46e8b732eeea4fa962337115926d4980618d1e7f27","first_seen":"2024-12-01T22:57:02.637413Z","last_seen":"2026-07-27T10:32:54.787302Z","times_seen":23,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/project-8.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/project-8.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1759\r\nlast-modified: Mon, 07 Dec 2020 19:06:44 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 05:27:11 GMT\r\netag: \"260aeac4b1626aecd0e88471a14ad8d9\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: _CaJvBWwmGm5yQ85IihFw9f0FUbkeDS_Gomo4ivY5xkhPet5HqiBKA==\r\nage: 17940\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"260aeac4b1626aecd0e88471a14ad8d9","sha1":"c575ce19a2a34cfacf9c84c04ff896827c65d933","sha256":"51a9972c6f13b5510730dff6c349f812510c778b2f7722f00426c287246c50cf","sha512":"bf1e327dd18483249a0a2bc6fc18e04934f99af93639e74c70f2b2357f1e9e1df4a9432e73835225183021ba50474d2423e806c0d2c82040bbeeefa1212cbc69","ssdeep":"","tlshash":"bd3108965f8423c76f2c056136bfe203db5c18207e7062deed5b7a157a213056d4b36a","first_seen":"2023-04-19T16:22:05Z","last_seen":"2026-08-01T15:30:39.938081Z","times_seen":918,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":106,"dns":34,"connect":12,"send":0,"wait":11,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:16.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://swiftrexpay.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1176\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1176,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20260304\",null,null,[4,0]]],1871,[[1772791866111,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"57EDCA9C-5C8B-444B-9FA6-09F38A8449A1\\\",[\\\"https://swiftrexpay.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,21000000],[null,22000000],[null,184000000],[null,184000000],[null,427000000],[null,305000000],null,[null,555000000],[null,555000000],10747,10366,60457]],[\\\"translate:page_load_to_initialized\\\",[null,555000000],[2,313000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1772791876113]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://swiftrexpay.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 06 Mar 2026 10:11:16 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-02T18:46:44.468173Z","times_seen":583889,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/jquery.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/jquery.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32851\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-02T18:49:22.851207Z","times_seen":83992,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=converter\u0026theme=light","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /widget?type=converter\u0026theme=light HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muoItWE7k2PpYDFGHOGVhT3tT7A080XJckkaVwrWQrmaLweludsfS36N0CyQzYa1jA4G9DEtIJbxyJx8kVgr24Zy4IvTinDDdMMJoQglAGWH\"}]}\r\nset-cookie: IDENTITY=7900e37990455d70be45162d3c0d993079ad040b\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: User-Agent,Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex, nofollow\r\nx-xss-protection: 1\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=5,cfOrigin;dur=47\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d809300fcfebe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9203,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1055)","md5":"49029a6e26105bf244448007a4379793","sha1":"f301f0566b8aa746de13b766082836c70b9da071","sha256":"9c5a72d2e0b5e537968448f6229f7025a006f278effb0548fcd3b6db5476d02c","sha512":"ac7b950a544bbd1129bee20c3230043d9963a2742a1ae4dd62ce0e90ee0e2348c1c7ced2c090d10d400fe691fd4a938cdf1cdf6c238753b235c752b28554878d","ssdeep":"192:IFri8HDaT/xYKnezgFdzeCeIE/H3s0P/vq:Ari8HBhIE/80C","tlshash":"4a1263b75961c80522628299fbd37928e407145fc6e9bc26b59c19af0fc2fa10973d3a","first_seen":"2026-03-06T10:11:37.428024Z","last_seen":"2026-04-26T04:24:29.50147Z","times_seen":6,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":64,"dns":23,"connect":14,"send":0,"wait":64,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/css/images/pricing-bg.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/css/images/pricing-bg.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testing6.jpg","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testing6.jpg HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45957\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45957,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, description=Stock Investment Banking Business Trade Exchange ConceptRawpixel Ltd��\u0005ohttp://ns.adobe.com/xap/1.0/, copyright=Rawpixel Ltd��\u0005ohttp://ns.adobe.com/xap/1.0/], progressive, precision 8, 612x415, components 3","md5":"84315636957b6a823060e28bc112a2f1","sha1":"da7f35ef4bf20047ae871cd7452562f9b0ef4ec8","sha256":"69c16c5ea06fadaa92d6978ad5bf13a191ffa5f889c75443f1d28b5b3ba66f3c","sha512":"5c117183000cc927b1fd9bfcc49b94807721d48362e68b4e6ad7c49b723d7d54c3dc1d3be92e005824b7e8d6a68150dc8459408a09d8bec99674bf8376877fde","ssdeep":"768:rxGpJMdHqntZem0JN5BpAU4kcd8m4UMC5ogWjVH8Z1G4Dw0ZGkIQ:rTdKn7v0rAqjm4IQhS7","tlshash":"9d2301c22553fc037ac6f971d1f1739693f3a90aa72c4f0ee476a52524739602ab069f","first_seen":"2025-03-16T15:21:51.717273Z","last_seen":"2026-07-27T10:32:54.811435Z","times_seen":16,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/825.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/825.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 314\r\nlast-modified: Fri, 28 Jul 2023 07:44:51 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 05:31:49 GMT\r\netag: \"da33d4dc1767175abecee422b56d7678\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 1dcIKyT3ZpvLvm9NoDdMeNM330EWy5tqdD-4vFoeQB3t0FjAPsMIMA==\r\nage: 17767\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"da33d4dc1767175abecee422b56d7678","sha1":"0e525d1e7616980449f0f2617ddb65bc77e3f064","sha256":"357122652b497822a01833fc055edad08ac0c7db2f1069e4e3efb9cd9fbe0beb","sha512":"3cdd0ac2f64ecbd5c2051181fbb4fa3506566bdb822edd7c6eb4bfcbb843e2997fe211405777be8038e6ebd50878e38a8ac1961defc5876f159f04c9bd22f849","ssdeep":"","tlshash":"02e07d507a4052fec9327b76dc22032b745b1cc399b0502f19a09466eb624e193c6955","first_seen":"2023-07-28T23:49:01Z","last_seen":"2026-08-01T06:14:37.361073Z","times_seen":881,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":101,"dns":35,"connect":11,"send":0,"wait":13,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T10:11:03.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.30\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":60457,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (402), with CRLF line terminators","md5":"6d801e38ace313ca14565002159f6b72","sha1":"cab40d3f0cfe702af276a4967b38996fdae12b43","sha256":"f51f4f1e023c0b9ba6f0d38daa3780e90106f429b8630ffba93236f22513c40b","sha512":"44e9babb84f1ba9c05f5538d631c4f26ae24587e1060df28d526935e14fd034ae646b690a66413be47a93957e3bde653fe9b32560c98bf894374689319490bc1","ssdeep":"384:JIuiP5AaVIZN6RnKmvRWGEjM/0JwLdf9ADuG:JIFeayHJm5DiM8JE59ADz","tlshash":"9443fc3194c1602701b385c99a616f9aff96820bcb1b8a9476fc2bdb6ff7d48cc07549","first_seen":"2026-03-06T10:11:37.433624Z","last_seen":"2026-03-06T11:12:13.419209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":407,"dns":163,"connect":117,"send":0,"wait":126,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/appear.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/appear.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1226\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4228,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-08-02T15:27:28.637093Z","times_seen":5233,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 22:00:41 GMT\r\nexpires: Thu, 04 Mar 2027 22:00:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130223\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-01T02:32:19.771217Z","times_seen":7901,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":71,"dns":1,"connect":21,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/32x32/2010.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/32x32/2010.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 294\r\nlast-modified: Wed, 30 Jul 2025 12:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 05:22:17 GMT\r\ncache-control: public, max-age=86400\r\netag: \"b0daee00997a77ee7106aae78a7519b0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: eCiE-N00Peb1th-OcGhjMhP4nfASfMywWTTHDherQF5-umw9ejiM-Q==\r\nage: 17945\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b0daee00997a77ee7106aae78a7519b0","sha1":"28de3b77db095abefe435988362da51f85c03d97","sha256":"9b4cd1b3fea428c732481ba097baa9c801d1021b9e9d3bc160b5e6d67b94daaa","sha512":"113a2b5c1daa16f10c6d328f36f2270985face81ae694e73f98a0ad4475b150a94ed0c573a36c350dba5284c46f61addbcf630a1c9c35ee817ab5ab5b0b25368","ssdeep":"","tlshash":"fce0ebf7a7ce06b6d431284f102261feab768db8c888002c052f15384b3d2babac01c5","first_seen":"2025-08-01T10:28:26.029463Z","last_seen":"2026-08-01T06:14:37.312492Z","times_seen":321,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CNhvSpp0.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:06.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-CNhvSpp0.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://swiftrexpay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:11:06 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6994310c-919a\"\r\nexpires: Wed, 17 Feb 2027 09:18:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJGwH3wXUWAAwBuUwKEwH3DAAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: fdb541236efd5da13aa8aa69dc497d0f\r\nx-77-cache: HIT\r\nx-77-age: 1471937\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37273)","md5":"0bf3fa4ae16e33ecf6bae9c7a91c24ef","sha1":"d4c8266daeb1f4b825d4db90f13765f82224b9bd","sha256":"05085b4c6bb66159589e884f0cfe7dc68c3e5953fd10d34941036a47809faeb0","sha512":"9b3769c86553af1f03838f99420120ae72f4284719508d29e96a425f968a885f8fc17f322861e575d209b55245481ad74b230576d7746d1f8ba3a3b950000c5c","ssdeep":"768:E8Ch4TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E804TcCWYtdXjuPF4t2Z","tlshash":"d7f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-02-17T09:27:34.886834Z","last_seen":"2026-03-10T05:00:21.922479Z","times_seen":1217,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testimonial-4.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testimonial-4.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/fonts/fa-solid-900.woff2","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/font-awesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/static/webfonts/fa-light-300.woff2","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.coinlib.io/widget?type=converter\u0026theme=light","date":"2026-03-06T10:11:05.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /static/webfonts/fa-light-300.woff2 HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.coinlib.io/static/css/merged-bootstrap-styles.css?25799\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 66880\r\ncontent-type: font/woff2\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\netag: \"10540-5f70afa528940\"\r\nlast-modified: Thu, 16 Mar 2023 21:16:45 GMT\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXrsBP5tbnAP%2F4IDH%2FfZtxFKFFRN2eWP29MDfbQ7%2FJZhMFef3VWY4p77wjxCJpnV5UmZTFa6vRu4hhgWoALt3vVlyWxU8jGir%2F9anim%2FpD2Y\"}]}\r\ncf-ray: 9d80930549f99ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66880,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66880, version 1.0","md5":"25ea1f58b39fcf5a5caa3e67d54ea1d3","sha1":"794f00415bc994cabc9dc404028289394548a0e9","sha256":"08c5812dd025af3149b80ecb972803b280476bebb5e9f02416e6f007a04de8b4","sha512":"e5db53c5246c0b2b0edba97139c6d6098b853ccc0bf2f10baa70b28877e102e25fd7c6580e1a8291b06aa3d46a08e53b7bffb0098dc64ab4c22ff472452c86d5","ssdeep":"1536:jIMrf4Tq8vpFsMNL32z76D94Nh27ZutF72r4cC99zLw:UwfwFsMNiz76D94Nh21MF720b3w","tlshash":"9663020bb189388ba573145df2da770fc52a9d481f4cd78cf3ac210a8adee1d7898725","first_seen":"2023-04-05T15:14:37Z","last_seen":"2026-07-12T20:21:40.19535Z","times_seen":626,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/fonts/fa-solid-900.ttf","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:05.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/fonts/fa-solid-900.ttf HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/static/assets/css/font-awesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Mar 2026 10:11:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T18:49:08.306803Z","times_seen":145344,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/images/testimonial-5.png","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /images/testimonial-5.png HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 10:11:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11731\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"b5c28c52dee374e90b51acbcef7d0f89","sha1":"e5195d61bd6c2d243c49253c7f4680050b7f2f9e","sha256":"bf35cbbf5f75aa01db807a8d34d3b4d7a0999a9fad9d443ec92cd39001cdd9cb","sha512":"1a861b2b33ee4467d6fb570387fcdcf7d36b60f3efa90709fe2496f112e5baf6215c8cb9bc36ea56f42dcc4ea2250c5b83945a0b7a9a0270e3ed4541f196244a","ssdeep":"192:W2A9nJo2lTqnRMiQYBAkga3zAeeabHgLdJvihs8RQawCOzM6TuCcda3:2nTqRM/YBRgCAeHzmLih1RnOzZ3","tlshash":"5f32bf0f92109b82b51bd2f19ddce51cd8621a596076f35d7ff24eb28e28ab10c21ec3","first_seen":"2023-05-19T17:48:09Z","last_seen":"2026-07-27T07:33:38.281501Z","times_seen":32,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftrexpay.com/static/assets/js/scrollbar.js","fqdn":"swiftrexpay.com","domain":"swiftrexpay.com","tld":"com"},"ip":{"addr":"172.93.120.110","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftrexpay.com/","date":"2026-03-06T10:11:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftrexpay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 05:38:53 GMT","end":"Wed, 29 Apr 2026 05:38:52 GMT"},"fingerprint":{"sha1":"FE:7E:76:57:18:42:5B:E8:CC:F4:D9:14:F9:E0:C8:67:B3:0F:19:41","sha256":"77:84:3C:A5:3E:4D:85:81:0A:A1:40:37:32:7C:6A:80:89:73:DD:D8:AA:C6:44:29:B6:DA:A6:DA:84:BC:A4:0F"}}},"request":{"raw":"GET /static/assets/js/scrollbar.js HTTP/1.1\r\nHost: swiftrexpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swiftrexpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Dec 2024 18:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11725\r\ndate: Fri, 06 Mar 2026 10:11:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40547,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-02T06:09:44.702348Z","times_seen":4255,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"swiftrexpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}