{"report_id":"49b30eaa-1a11-494d-8211-9ff29506683c","version":0,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-07-12T17:16:57Z","url":{"schema":"http","addr":"apps-kyberswaps.com","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"172.67.153.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"apps-kyberswaps.com/swap.htm","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"title":"KyberSwap - Limitless Access To DeFi","dom":{"size":224723,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23000)","md5":"b2b5e04a4487b3907dfffed702b29606","sha1":"21f79cdc901fea78e12c907ac1e5b503c2481acc","sha256":"de7e43a7797e760d8e4489ee9c110b713ccc1610325614881aff26fd250dd3fc","sha512":"9234b5f55759c1d09f285f3c1e4c0ee92666f325571a82ac40109b6a81e614291aa99254db64cfd8a6feca96d853ba20d76f930fb5119a38f901a4e2d1251a15","ssdeep":"3072:GPv396mO9RUqJ0z6gvjMfpyPk57K5X6YR:GQmkUZz6gvjMfg5B","tlshash":"3d243cf1a390a0febc2b47b5e225fd6c720664b6ef714bc8f1b8969047c1eda4c16950","dom_hash":"domhash6caacbfad62d146133cd153ba7fc92ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"apps-kyberswaps.com","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"172.67.153.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T17:16:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"apps-kyberswaps.com","ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-10T12:44:17.258908Z","last_seen":"2026-07-10T12:44:17.258908Z","alert_count":40,"request_count":20,"received_data":8858586,"sent_data":10366,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"kyberswap.com","ip":{"addr":"172.66.170.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-19","domain_rank":94500,"first_seen":"2019-02-01T06:32:22Z","last_seen":"2026-07-10T09:06:24.246174Z","alert_count":0,"request_count":1,"received_data":20457,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-07-07T01:27:15.35768Z","alert_count":0,"request_count":1,"received_data":646,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dre-remout.pro","ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-04T07:51:56.937274Z","last_seen":"2026-07-04T07:51:56.937274Z","alert_count":0,"request_count":4,"received_data":113856,"sent_data":2176,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":1185675,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":25420,"sent_data":607,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"apps-kyberswaps.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-13T12:16:58.694482Z","times_seen":394696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/w-modal.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-13T05:36:53.081156Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/w-loader.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-13T05:36:53.076235Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/modules.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-07-13T05:36:53.122386Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/main.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"058f8d2c13f022d67b732c0f40d1ed3a","sha1":"923c96c37a48e82f4ab05e9123b3a6ee91edfb40","sha256":"a218fe52692f5dbf25e440c00bc4542498a5d147d7bd950b3a3a20a76b5dc6a1","sha512":"fa6ac010d49a37584c37639a4d95c8f1efe25178d7d1bd4e2734973a68220aa065a977803c084ed125e97f9ec447da04f2d4467e513badbbb60620d6e614455b","ssdeep":"3072:cZW4l9perg28wOX8H2rjmcFVR7IrB+604XJUNFn:cvperg2DH2rhFhF","tlshash":"b344c79865fb443c805b346d5a5f61007834f287708cddb53abd8921afcdda4cae2bad","size":277157,"data":"","first_seen":"2026-07-10T09:06:31.104246Z","last_seen":"2026-07-12T19:44:42.670619Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.10.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e131238273584c83b0089668cf50b1c","sha1":"a0e353e006c1ce398cc28b065c9e2754f9f6d655","sha256":"8cdcd2aa68c68480d5180ca0cd64f190c7064fdecff596ea34042eba5ff181db","sha512":"1179354c1ad3d530be6a372bf1cf8c71584616fe31008fbc9be57b4f83f04f731d600bf8ee3922ae57934d987c205b51bfdd19b4a3ce93fe09253194690f5de9","ssdeep":"6144:O/QrM70NNb2ki3aT9lWCNvmsIAAvkNS98bKwTlC1wr5ndZYTXLpg3jvLJvyzzWaO:OIrM7xkr/WamsIbcvbKunDYn6vU8","tlshash":"0c45f9c47691b095c3a25ad1446fd00ae33dfd647c8c4169bb57ecf32ca8a89512bf3a","size":1184878,"data":"","first_seen":"2023-05-12T17:02:00Z","last_seen":"2026-07-12T19:44:42.67509Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"NetworkError when attempting to fetch resource.","filename":"https://apps-kyberswaps.com/assets/main.js","line_number":99,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"apps-kyberswaps.com/","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:16:24.942Z","timestamp":1783876584942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=2199\r\nlocation: /swap.htm\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHF2%2F8VH3gxVXFn0sMlTuwHKgVeGC7YKA3CZhZHdO%2FM1Q56JYm44RX7GFpS2C1tVYfMnfOhPdM35FmFezHqVwyT%2FDuivpkMLRZ448P6GBWWpx8HFss7QtfKGG0NhKOootesrwARQ\"}]}\r\ncf-ray: a1a1b2101d200afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T12:17:46.716515Z","times_seen":17212432,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":7,"connect":20,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/images/image_2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2.svg","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.763Z","timestamp":1783876585763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /images/image_2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2.svg HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=5,i\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: W/\"6a4bbcd1-1d79\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY544cXYBsQOXG9vXO2JR9n5o%2FpW%2BqTxv3enNhn9wrqfBKqVpm%2FxGwTTYcCJ82%2FkuHIyUzITyMQ3eLGNA4eEje3320vnRzIlZLyOZaSXJcnb3h%2B8OqZvqpqCBiEsjmCxS6hL63zl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b2150d3a0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7545,"size_decoded":3017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2dda438a79618571ba17f8259517a1ef","sha1":"2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2","sha256":"4f69185e7a28cdf58cfb0ae430f34ae8622a18b31d35b414d3b9d48d6a223a05","sha512":"ee87ec6f82e01d76fcbafc3a3ae36dbd4e9f8e19b4257ca46d47d0d68677dad83a3ee8b62242ead7373c82c873919141a2a923800d0b5ade775d56b0a10b00f2","ssdeep":"96:gAkFjsfuvjgOApylYgAmEoUGt9JbCJ4T9xqe0RJCa/MGCsalEMxhH5H:zkFsavS7Gt9xsZEGCsWV5","tlshash":"36f162e183fc6ad4f01497ccf755307874156aab5f4146a8f53d0fe8a7820aa887f8c9","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-07-12T19:44:42.672914Z","times_seen":32,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:26.158Z","timestamp":1783876586158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:26 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: \"6a4bbcd1-c48c\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2IWCsq0tHxoGICbywFCKrq0XjtqiIblzGO1UtE1MgQL%2FqXUeczCKlEQhBFcBQnjcTWznw5yG2sxI8V%2BgDqRxGMmSUn%2FUkJ6GEWFLh50d9%2BXZ%2Be2iTpixvJgEUyXUGGoVrH95h83\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b2177d5f0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51060,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-13T12:27:52.214705Z","times_seen":22400,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/swap.htm","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:16:25.118Z","timestamp":1783876585118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /swap.htm HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cq%2BFRSF7sfNqs6%2BriM8bEz59DWhrBbyjZ1AJkDQbbJbXqkMIsaeHTWs4gHt%2FVmuzWoIAfzHkz7PtVS7QjMhFxmIx9QCcmp99au2iQxLmcUMA8kMKh8LXhuDHMtpZB%2Bx0dQYIafgh\"}]}\r\npriority: u=0,i\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a1b210fd220afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":184421,"size_decoded":53599,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (43015)","md5":"7869f39fe1b866d5363b5d486911b254","sha1":"49be729c0b2848a5a4a74a6d5770d497ae4dcb2b","sha256":"0f755e04606d4f8ba799eb352fdd4e5b54d6cf337bf27e6b00327a513067f2e3","sha512":"fc010a4f3ab98f4cf500a1d055527113150c80b7e878695765f670d67c97ed7fc091cbb2d4c943f48d36e409d4dc8cdb745d4b9408260788bd13552747e8fe4f","ssdeep":"1536:V9mg914zExY1AmqaDwcZGVsbGMlwDE5Y1oWxmxm19zZJ5bHYSZz6gvjMMcpyPkwC:jmqmZG50gJJz6gvjMfpyPk57Ky6Y1","tlshash":"8d042af2a390a0fdb81387b4e139b97d721b74b6ff654a84f6ac5b9067c09d64c06d80","first_seen":"2026-07-12T17:17:08.874858Z","last_seen":"2026-07-12T17:17:08.874858Z","times_seen":1,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/images/image_3859a6d4755469903cf599858048e73283f69246.ico","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:26.926Z","timestamp":1783876586926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /images/image_3859a6d4755469903cf599858048e73283f69246.ico HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:27 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a4bbcd1-3aee\"\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WWAdvEUM%2BJUadzMQTQGE36toPKh3%2FCcvue4L7eYjuvdDumUQ1Nd%2BEVZgkQe2iOU06%2FAml9RKdisacOGmY%2FoXnMWaLvZfr987PkKt2S6s5UAxqjkOY93aL2SBN7GaEH9Fko7lsX1\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a1b21c4d820afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":3142,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"4973bd611d08de1b60cd91c586bb8b07","sha1":"3859a6d4755469903cf599858048e73283f69246","sha256":"f6d7868c3585b58b5c51155c396df140072956434e19103f9eb9d8ec7cd1d4ae","sha512":"50e06e2f0270816ed291d1000432cfcd66edc61113b2b8e94f589086a7ffd8bb5edd18da5f1f64e67a5de5b795d1f25ab0ac4dd43fdaa9773deac892619cd3ae","ssdeep":"192:jZPTVFDCLcy/5rViXKn1DNOfhrVh6ys8T:jby/51a37","tlshash":"b462fde49f52f4b4c8890570ec6409828e393cfba964741506e87fc33ab26a5fccb975","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-07-12T19:44:42.661172Z","times_seen":45,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:26.083Z","timestamp":1783876586083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:26 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: \"6a4bbcd1-c48c\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lcAMZ21EPIgToZzCSuyiC1IOtr%2FSTF3NiNHEEeDQfcXtYhdhxAUQ%2FtDuwfhuF2pbWWKJKPv67PNGjpnwcXpFANxOHTgR3TAer6RY66hz5PFLrM6AAB8AuEv%2FKlTowGZiy2WT4z2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b2170d580afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-13T12:27:52.214705Z","times_seen":22400,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/ethereum-989041d8.svg","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:26.100Z","timestamp":1783876586100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /assets/ethereum-989041d8.svg HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:26 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=794\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bs9ElDj0lZ7Jt%2F76hcNYW%2FUcgGPz0ZkblUOxETdEXR%2FRVf70oevLvqTEwM%2FQTsufUREfO3ZiymCVxVC3EUjD91RPeWBz0JAOIZQ8X4iuB4AKlfhpKkZCk3DC7Pm8T5NVZGIL7DT2\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b2172d590afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3812,"size_decoded":2122,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"93a5c5dfbe4d163cc191c1b139ddd356","sha1":"77a92e094cfdc24341d75ff1de75643820f2f2ae","sha256":"a4f2522a3f2d7f415a5f2349d01755816f5522d046356743cfdbe1673304edbf","sha512":"1f26effef031f6e6c8dddd9dabfcb334c5ea9090377eb081a39d6f935822c99ca1aff0c13f9bcbb9e59e37de56921e75877f8990737eb318d0761ca1533c037a","ssdeep":"","tlshash":"a171329b06eb811d6023916f3b9d7301b8a2863bd75bfc253d4e8358afcd44a40e279c","first_seen":"2026-01-18T10:52:03.855468Z","last_seen":"2026-07-13T01:41:25.291608Z","times_seen":115,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswap.com/favicon.png?version=v1","fqdn":"kyberswap.com","domain":"kyberswap.com","tld":"com"},"ip":{"addr":"172.66.170.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{225c0830-00bf-4959-8d2f-471b68940bf8}?https://apps-kyberswaps.com","date":"2026-07-12T17:16:26.221Z","timestamp":1783876586221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 22:30:29 GMT","end":"Wed, 19 Aug 2026 23:30:27 GMT"},"fingerprint":{"sha1":"03:30:0E:A9:9B:23:EB:CF:29:80:28:3C:05:AF:21:44:90:FC:18:EC","sha256":"C2:28:8A:2D:D0:E6:05:2A:36:A5:F1:A7:36:2E:F1:86:63:CF:D2:B6:9F:6E:32:50:D9:79:10:FF:A3:C2:56:8B"}}},"request":{"raw":"GET /favicon.png?version=v1 HTTP/1.1\r\nHost: kyberswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 18934\r\ncf-ray: a1a1b21838925ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1673184\r\ncache-control: public, max-age=2592000\r\netag: \"6a3897d8-49f6\"\r\nexpires: Thu, 23 Jul 2026 08:30:01 GMT\r\nlast-modified: Mon, 22 Jun 2026 02:03:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors 'self' https://platform.alphanomics.io https://staging.alphanomics.io https://alphanomics.io https://thesonicgoat.com https://app.safe.global https://dexscreener.com https://dev-app.telifi.xyz https://stg-app.telifi.xyz https://app.tobiwallet.app https://coinsdo.com https://*.gurunetwork.ai https://basedbrett.com https://www.basedbrett.com https://web.telegram.org https://safe.berachain.com https://testnet.berally.io https://app.berally.io https://dex.guru https://app.gains-associates.com https://new-gains.netlify.app https://gains-associates.com https://arbitragedash.xyz https://arbitragedash.zapto.org https://daos.world https://dhedge.org https://app.sectorone.xyz https://app.swapline.com https://chamberfi.com;\r\ncross-origin-embedder-policy: require-corp; report-to=\"default\";\r\ncross-origin-opener-policy: same-origin; report-to=\"default\";\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 0\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":18934,"size_decoded":20457,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"a5a0046ac66ed0ed6e957d4c88f87648","sha1":"8f1ce4fb1da9ef674ee7bd20f823b2d48c3c7f95","sha256":"b414fc61c811fe626f62527a7a204f890a70168c41d50650b88341e6eeb9dbb7","sha512":"477416f4649b76326256541d1d6d07fddbad8f5625bdd2531a0ba32ed8fdb89eef6d79d11ad6a6ab8305c23835cd0c71128076a9a44ed2098181d509052f9130","ssdeep":"384:vgJnTYlzID3ZGhANM7r9MJciu2b2xKFOeSAcsLFw8688/zdZNTp7gL5:IJx2ry42XFOlAvF68Yz7m","tlshash":"16826cb9ef4098fca499e050f8c5570f6ba338934392a083f97b0d5a45a3ff705622a1","first_seen":"2025-05-26T12:25:42.262827Z","last_seen":"2026-07-12T19:44:42.660532Z","times_seen":29,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":45,"connect":1,"send":0,"wait":14,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:27.090Z","timestamp":1783876587090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 21:09:40 GMT","end":"Sat, 19 Sep 2026 22:09:34 GMT"},"fingerprint":{"sha1":"BC:5D:BA:6B:85:5B:AB:6D:AC:FA:AE:08:60:30:D5:B7:00:DF:7A:6D","sha256":"7F:4B:1F:9D:6C:9D:C6:6E:72:31:02:D1:AA:6A:28:51:EB:2B:06:FC:E9:0E:A3:03:26:25:FB:13:6A:CB:51:4D"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://apps-kyberswaps.com/\r\nOrigin: https://apps-kyberswaps.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\ndate: Sun, 12 Jul 2026 17:16:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 273\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a1a1b230dd5456a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":646,"mime_type":"application/json","magic":"JSON text data","md5":"817fe0f750fa91ac954b06a6e179f676","sha1":"651023a67e8786f8c7a63d323d81512687d851f1","sha256":"e54a34359ebeb4245031b742ee300e3fdd72ccf608d481d57caca1fc16147f17","sha512":"b6f4a24f4e9fd1ad99775fcfddc5311c09b8a77a3fc53798f1918b49fe87efcf1063aca6f4c9b63bb0d60d87d11bb5d0ff6223049f30b58d8013b642f33b6109","ssdeep":"","tlshash":"87d012f75585191b2b3743567068a8ace8d3888d99416447957d4364a28cd39128f21a","first_seen":"2026-06-09T22:35:40.080024Z","last_seen":"2026-07-13T05:36:53.082724Z","times_seen":31,"resource_available":false,"data":null}},"time_used":3130,"timings":{"blocked":0,"dns":9,"connect":1,"send":0,"wait":7,"receive":0,"ssl":3112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:27.436Z","timestamp":1783876587436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://apps-kyberswaps.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1513\r\nOrigin: https://apps-kyberswaps.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1513,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"bfd8-jhyM6qIkUVuzxxEZ3VdLYr1Y7Zo\"\r\ndate: Sun, 12 Jul 2026 17:16:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siKR4sJx%2BzDbMTGktq85H9hnFn3mg%2FFK05hgx8l7YfL5m6ZIXH7tYa8PO3h5K4ydpaI%2Bar02mvBKpG6F9O3TtrXoORQkvuUpChucwSuExokqADy4uodQacEgkLRj23pSQA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a1b21f7e4cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":49112,"size_decoded":12834,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (49112), with no line terminators","md5":"cfc1cf8be3749f60d03779a10b54c4c0","sha1":"8e1c8ceaa224515bb3c71119dd574b62bd58ed9a","sha256":"6390a1af0857e7f1723254e0aa7c741f3c6aaddae1c61148380803c88453d97e","sha512":"105a4626b252dd71aa995d87fd0f3c9937879f6dfe08cea04bb301213753a4b5a0d385a8b75f227e1755b999b09915bafe20548ff0d5afa9fc061aeeb0143ca5","ssdeep":"768:GtrrhPuKtIfppCmUzZsjb1HSK7zWoaFWSOW8GHrAj:IrrhPuKtIfpwmUsFbzWoaFWS+GLq","tlshash":"a523ae70f99e68e42a4f897abb89f93f1b1345d4192fa53c0a1c054329e37d2cf950e6","first_seen":"2026-07-12T17:17:08.879958Z","last_seen":"2026-07-12T19:44:42.674471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/images/image_f9a89309caff2f438ad6bd931392e1dcf52d3172.png","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.754Z","timestamp":1783876585754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /images/image_f9a89309caff2f438ad6bd931392e1dcf52d3172.png HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: \"6a4bbcd1-191120\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIVqmZLkr00FIazchgKsO0eaGnK%2BiZpGW%2BatT1EphrdwSc20eW43TlKygRkEhHzdfBIjVvhZvr8Nrci8B3cSOpofAZR1%2Fdt%2BNOsd6LcbxbdIcWvVUJNoM4qSUarhcR9GWp9MPKje\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214fd370afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1642784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642784,"size_decoded":1643519,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"e52b0ef49b19bef04b18ca323b7a10bd","sha1":"2592f8ee91c3c91ce911dd5021a4e1decaa45bec","sha256":"0b90b8fec8136657159a2fb0c7e5f57d249468caad021953ea27e6fb991503c1","sha512":"e431ac06bc57ce317adef9da1cb4e2f2178f9a652e7a53f3eb37efdac2d7455f4d7980cf0bc504c92e3e5b9b15e7917138b21249699f92d30cb4da81192681e4","ssdeep":"24576:FqKwlW94c4u3VDCa706FNPIJWEoJ4sq3TTPP/B2Z1myIhY67:F1zxV50OIFoJXqv/o1tK","tlshash":"d82533464df8793bf08b757d2908c874e8da64c02fdad2c30416c8ba3a6dfa6546b7d1","first_seen":"2026-07-10T09:06:31.096953Z","last_seen":"2026-07-12T19:44:42.672061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.10.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.733Z","timestamp":1783876585733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/web3@1.10.0/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.10.0\r\nx-jsd-version-type: version\r\netag: W/\"12146e-oONT4AbBzjmMwosGXJ4nVPn21lU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 967930\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\nx-served-by: cache-fra-eddf8230188-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 306235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1184878,"size_decoded":307032,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"d37b2a59a14a61b87878e711a84b61b8","sha1":"6cfc4156cfc57c1b80575c0500ff23a8ebaf138f","sha256":"b373e98462cf00b9307cb622f54dd317f4d6d607bb222edba86f9e6dc9e53fd2","sha512":"2bb491e0f551d18163e56b01dee786e0a5a897952476da5d69bb1389fd567002d6a28270ee807abf58781cd4afe3e66b65a2389f26c2f379cd6e9cc2e77dc894","ssdeep":"6144:O/QrM70NNb2ki3aT9lWCNvmsIAAvkNS98bKwTlC1wr5ndZYTXLpg3jvLJvyzzY:OIrM7xkr/WamsIbcvbKunDYnk","tlshash":"9625e9d47291b065c2a25ed5402fd00ae33dfd687c4c5169bb17ecf72ca8a89512bf3a","first_seen":"2025-08-07T13:48:42.705858Z","last_seen":"2026-07-12T19:44:42.657535Z","times_seen":76,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":11,"receive":28,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/w-loader.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.741Z","timestamp":1783876585741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: W/\"6a4bbcd1-a2f4\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tEbP3lWF4i4W91JXMPC3ZUrEop9v51sbx%2FKg99qki%2FxWctFC2uti%2B0Z8nyAOX3SZzH3G%2BasADq2wf3DMXe8Ldov38%2FwBfsTFguyIK68y3t8pAZ9ZYUnQLGo%2B58LHmawl2YGWolf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214ed320afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":7916,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-13T05:36:53.076235Z","times_seen":389,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:27.589Z","timestamp":1783876587589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://apps-kyberswaps.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1521\r\nOrigin: https://apps-kyberswaps.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1521,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"f1a8-lScxV9wNzznpHXzD+gcewRZteo0\"\r\ndate: Sun, 12 Jul 2026 17:16:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEezmFvXv5OrAxZGtHeZpLQ51YFv57Thg4%2B0SV7DCqTG63fqb83U1Fc%2F9CEyyRkc2eZ3xkn%2BHvgIIBFyDFpCpqWFFUvS%2Btn2XjDv%2BiEPw2YynmMUZxWJ910s8wNFiE0Pfg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a1b2206e83b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61864,"size_decoded":5396,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61864), with no line terminators","md5":"ac5658d364f085c83fd64aac710e0329","sha1":"95273157dc0dcf39e91d7cc3fa071ec1166d7a8d","sha256":"35288a5698ba344d1f24621a5b25c03183ec5a4a4f6ecafe55409c05faf6421c","sha512":"60813d2a12955f2c1cd85be9eb7b9bdfd37baa21a11e95113a800218691ded9ef0dd7c35efe4f20616661d5a6ef9912604cf8a3c1eac95425e2b29107e4ec418","ssdeep":"768:/xpcpdPi+jWSmXxoXgpr2/tUz8QRclLSIQeQWJfyiOnXs4EMUDUQLL41iBZATycu:t8P","tlshash":"13536b51a5a979d0825ec8adaedd97360b4386f41c7fd62407061e4b1be2f92c7f00eb","first_seen":"2026-07-10T09:06:31.09859Z","last_seen":"2026-07-12T19:44:42.661876Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:27.124Z","timestamp":1783876587124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 17:16:27 GMT\r\ndate: Sun, 12 Jul 2026 17:16:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":1773,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-07-13T05:36:53.078041Z","times_seen":137,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":5,"connect":15,"send":0,"wait":35,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/logo-dark.svg","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.751Z","timestamp":1783876585751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /logo-dark.svg HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=5,i\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: W/\"6a4bbcd1-2d0a\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnoxjHNgnmPBh8TVOup2giXV5D%2FoaHBFi2C8JWZQr3L2nIzaVidwrOtiEwjMzWl%2Fk1hl9y89diJeisHJSRc2aYM3D5Wd199Gj0utTcbMIYrGzN6e%2BNmr4OZELK4k8XubSLaQMN93\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214fd350afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11530,"size_decoded":5698,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1e97a70a4526e877c271ea0e1c7872c","sha1":"4c977dd6993134311a58766c8765245f546f840a","sha256":"68f4ac53c4d68c54934a4620e605d9e190040bec7736487765225cd2e318810e","sha512":"761b7d00bc2ebead6c026850d043c95d54b4087488bb25a8f25a3838901282a9a8e6b360d7c7dae5ba48ecf4ffaf504b44cf98a9afd57aae0e145d9181756067","ssdeep":"192:hI+YuhJUKu168eQDuzbiuPijpcrn4A3Gh22z5PRo4ckhGQnzcuV2lv/ogonImXtL:W+tJeJexHiTcLl2z1q4KQouV2p5mZ","tlshash":"0332d5cdaf648af4e081e3f5c61794bd7a9a9dfa7a50c47cc7f50d12a49245e8902cc3","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-07-12T19:44:42.671497Z","times_seen":39,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/images/image_6a92887e90fc042ee2e4d0fb3854692beeaaf19a.png","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.757Z","timestamp":1783876585757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /images/image_6a92887e90fc042ee2e4d0fb3854692beeaaf19a.png HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: \"6a4bbcd1-1765\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7gLHrksLs3eA7kvWqfclARQPEEEdxkq%2Bs1Js5Akq8YS0X%2BjsopWHurANG0xfXjsoFkclwVtJUVJNKcpqeIodMh%2BhH4FEpN5oclerf4QIr1FqD%2BDPJysP0N79UVn40B1VbmKaj%2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214fd390afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5989\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5989,"size_decoded":6723,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"61e20ad43bafe0ca2b7ada87f1792a4c","sha1":"6a92887e90fc042ee2e4d0fb3854692beeaaf19a","sha256":"32076120b7bde0202fda306280a9df7917a5ab1a396d4a87db012930f8bbb7b3","sha512":"abeffc786faf67c9a0dc178b0ffb8aae7fbac541765952a55129645914ee52f51ce0e09a753442baa6b984560aa51933a5d24179f1befe1ccf521ea4d5763f2a","ssdeep":"96:4MEbD/XFc+Xcwyn/s11yjmNrD9zNoqtl9QNpvRq3TS+0wv2yb7f+5djnLprn:4rfepwy21yjY39Jzt7QNpvYOe+yb7fe3","tlshash":"a1c19dc0d974348607ab31e946f645e4b26a5f2059329bdf95bf32b1c633336d742103","first_seen":"2024-01-07T14:24:30Z","last_seen":"2026-07-12T19:44:42.665439Z","times_seen":35,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/style.css","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.731Z","timestamp":1783876585731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: W/\"6a4bbcd1-30e5d\"\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXQ2GT33GL0sdFRqCj6DtCtFi0%2FAH7rIpaNsKqc1%2FnjVefN77ZZy%2FAcVedYfQqOPcf9YYTyJ7xa9odrFXSwC8v9V8cOAV41nM6NN6mU6wM1Y%2FeSGGfNr1l9GxqV8jhaSVGH%2FEMEr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214dd2f0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200285,"size_decoded":29672,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5e07655379a960ef4a2160560861197","sha1":"0d304da5547f51812eb9fa57f76c4a250b72741f","sha256":"9b90dacdc6374ca4928a981d2181d0ec6a67c64620aa3d8ba66d9b90f744816d","sha512":"76bb4ccc548613c087b06273d053fa45e7f5d7236ed4ecb69cac29a24cd75006e281ddce7c06f9bbeff9fd33f1504c175167d6fbdd18ea4d6867bf86c36bb3a0","ssdeep":"3072:6B1P+lk4Kh+iDqr/ZA7kjjD+1JSU6JFlO8:6B1Pck4Khfqr/ZA7kjm1JSUOlr","tlshash":"dd149314be9a116d7e134e27218eb9c87c24b444c732079aed36516d9ac2cfe2af375c","first_seen":"2026-07-10T09:06:31.108917Z","last_seen":"2026-07-12T19:44:42.667115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/w-modal.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.739Z","timestamp":1783876585739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: W/\"6a4bbcd1-9307\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgQCwexOEx16qjVG3BCdBFfq0nMZ1iWRRQiMYVfGPVBRACBeykXCdFNTv9XmTnPL5b04eOZSvs0g7ljdEnB0mMS7WlEteT7B4%2FX8bI68NgpLyU3f3D00dsGjFGAAir7bgW1Clagp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214dd310afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":11185,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-13T05:36:53.081156Z","times_seen":197,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/modules.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.743Z","timestamp":1783876585743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: W/\"6a4bbcd1-5d1a20\"\r\nx-ray: wnp68428:0.020/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yV8IpDo0HWHHZMv%2BS9KEurjAXrmSlEYZ9f8zs4UN5RI%2Flpe5BfcqN3ePPK3%2B%2FEx7xWtJzE14%2FkeOtcIHK4WNTgCl0E66vGwC8FngvgHUHU4QeTP08BJPQL0ARvK6zUjb0Higlg4A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214ed330afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":1880967,"mime_type":"application/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-07-13T05:36:53.07716Z","times_seen":159,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/main.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.744Z","timestamp":1783876585744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: W/\"6a4bbcd1-43d34\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rt%2FuhrTsCN1zZZ6YwOU28KIWuvkihK3FK08rsw8ERAIWboCyuuA7LWmJJhVjo4NcfVZJWINQB2mjQa%2Bpp4cMxh53ihcvKZyF2H1p6NzSWZytpDEv%2F7p2LdC7JRch6nfgEHdgtHUW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214ed340afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277812,"size_decoded":35326,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (4614)","md5":"058f8d2c13f022d67b732c0f40d1ed3a","sha1":"923c96c37a48e82f4ab05e9123b3a6ee91edfb40","sha256":"a218fe52692f5dbf25e440c00bc4542498a5d147d7bd950b3a3a20a76b5dc6a1","sha512":"fa6ac010d49a37584c37639a4d95c8f1efe25178d7d1bd4e2734973a68220aa065a977803c084ed125e97f9ec447da04f2d4467e513badbbb60620d6e614455b","ssdeep":"3072:cZW4l9perg28wOX8H2rjmcFVR7IrB+604XJUNFn:cvperg2DH2rhFhF","tlshash":"b344c79865fb443c805b346d5a5f61007834f287708cddb53abd8921afcdda4cae2bad","first_seen":"2026-07-10T09:06:31.104246Z","last_seen":"2026-07-12T19:44:42.670619Z","times_seen":3,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:27.128Z","timestamp":1783876587128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://apps-kyberswaps.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1497\r\nOrigin: https://apps-kyberswaps.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1497,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"48-KGFETjvdkjE02JsdOlm0TAZe6DM\"\r\ndate: Sun, 12 Jul 2026 17:16:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yB4VnhJN2Bqe9hdm4b120GopwPk7Fxm8co5wGz%2FGq9XNQv2%2BUSCrIx93W%2Frs7jEbz9ceNoA6C9lCMx1FUhhFZ0bZG075pDMHqThE4%2BO2ThwjiiXs57YanM9xbNrkl%2FjXfQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a1b21e2e1ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":774,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7a8dbd206b05decc83f6a2a0baba9bde","sha1":"2861444e3bdd923134d89b1d3a59b44c065ee833","sha256":"11c34aec662da21eb9b2118c2ce447860d9e7fce1dea169e7f1d8244777bffd5","sha512":"5ddaa662c3a22bc53daad6fe25f70840703eff96a30c038c26b0f63fdf273edcdd5bc04c93a7ff41c2f622a820bfc8bb5137f4b212c4ab086a85ce1775142491","ssdeep":"","tlshash":"80a00285f0e72478610e4c39bdcad739055066b410dc4e546b4516126ea2f4adf79077","first_seen":"2026-07-12T17:17:08.891291Z","last_seen":"2026-07-12T17:17:08.891291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":81,"dns":0,"connect":15,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:27.826Z","timestamp":1783876587826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://apps-kyberswaps.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1585\r\nOrigin: https://apps-kyberswaps.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1585,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"28-LNKC8g8gszGD5V9ZJSIGoFND3f0\"\r\ndate: Sun, 12 Jul 2026 17:16:27 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RgrR2W%2FBsaRztzX7YtCDFQ1GdhtiNM13UzUAuJToua9cR5uNqsD5Y%2FQwUA4QdK%2BetuHOIeoRP7qdZDHSXyTpk%2BU5K0SjkCNQhqYTCWy8tV5Vf9lnQ6ztwDS4%2FbzlNvdXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b221eebcb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":40,"size_decoded":729,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"609ca0648d52fcb63c09d479c7d28c54","sha1":"2cd282f20f20b33183e55f59252206a05343ddfd","sha256":"0a71c39d6362311f890b06e0b36f870000bec8940bfa00eeae5d7795ef3fe266","sha512":"76ec487ff0b09025a66178cbd75bb53ecdbed185ebfa81ed54a13041f87b4f94a4199846a74891f6f265f09aaea948ecaf3c91aa485138edc4a8940050bcc526","ssdeep":"","tlshash":"c49004c5f00514f450054c157545d13d00405170105c4d40170404111dd1f0c451c073","first_seen":"2023-10-29T07:32:49Z","last_seen":"2026-07-12T19:44:42.664899Z","times_seen":12,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/assets/ethereum-989041d8.svg","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.753Z","timestamp":1783876585753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /assets/ethereum-989041d8.svg HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=794\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBREV8yScvfkXmndjXLwcqMO2d6W9GPEZNRP3djf2RMjST6xl2gwE9C%2B9PSOijRDfkN9R49bAar613kpR5mCdkrlcNWJr8eVZeQj4siWS51fZXglvQHCuC%2BQAZYO3mKRumHxzWW0\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214fd360afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3812,"size_decoded":2111,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"93a5c5dfbe4d163cc191c1b139ddd356","sha1":"77a92e094cfdc24341d75ff1de75643820f2f2ae","sha256":"a4f2522a3f2d7f415a5f2349d01755816f5522d046356743cfdbe1673304edbf","sha512":"1f26effef031f6e6c8dddd9dabfcb334c5ea9090377eb081a39d6f935822c99ca1aff0c13f9bcbb9e59e37de56921e75877f8990737eb318d0761ca1533c037a","ssdeep":"","tlshash":"a171329b06eb811d6023916f3b9d7301b8a2863bd75bfc253d4e8358afcd44a40e279c","first_seen":"2026-01-18T10:52:03.855468Z","last_seen":"2026-07-13T01:41:25.291608Z","times_seen":115,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/images/image_d44513d8c226023704219c7277c0cbcb85c9f202.png","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.756Z","timestamp":1783876585756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /images/image_d44513d8c226023704219c7277c0cbcb85c9f202.png HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: \"6a4bbcd1-2654e\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9lGTluF7FeRCEBzrhJLd8PjX1oD4e2ejwG2%2FnPLkjzTVyVgaxE9mDRN6acHF1MV3AOGVRyxHMiLlUA2vu6ydPJ4ZcEUODf19sHiWV2knvp5pZf%2F%2F2%2FRObnndx6yGTWNqJRAryUh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b214fd380afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157006,"size_decoded":157739,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"9ea20b632ac76b7a1c5fd9227d5993a4","sha1":"d44513d8c226023704219c7277c0cbcb85c9f202","sha256":"106c85eb541b76bdee4c38e37f7a3b3fddfd26db55a4fe9c44b50d28edc05561","sha512":"206e7c7c388158d4d1a54a58cf0740546aa68bfdb4e5a5ec1cba8712a1263e2fa6661474360def33913da879a698a57e16f4c9b62c2172bbdab5ff20530c3aa5","ssdeep":"3072:7sighxkoLA2iXFXU+TJnm7zlimtLWcuVDp2zpSDTDHqv5LPIvyqSW:5KxkL2snBoAsHubb/eBy31","tlshash":"f2e3f18b4e7a0cf0f2609eb89deb2a4976e905fd42386d134379d060bc4d74974ef686","first_seen":"2023-09-23T00:34:54Z","last_seen":"2026-07-12T19:44:42.663392Z","times_seen":27,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/images/image_64ad3822e72417845dd513f5c37f061afb1c19e9.svg","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.764Z","timestamp":1783876585764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /images/image_64ad3822e72417845dd513f5c37f061afb1c19e9.svg HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a4bbcd1-41a\"\r\npriority: u=5,i\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZaAc1lMi0C7URRePywfNNWMl40j5T7906h7yq16VfJJQEYJgabgtJYiCW%2BLof20jvUOvROJpUtsMWhCKtkUBfAuFBGtN3iw%2Biv1FwbCnW8UOcaN9er7S3crrt%2B4zS3ZgVP1vKYEI\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a1b2150d3b0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1050,"size_decoded":1300,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cc37b6f6f1a4d6929b08daf7e4c9918","sha1":"64ad3822e72417845dd513f5c37f061afb1c19e9","sha256":"ccc0d6bf9db586a5b6d1a8c2c73b9f2bd8ea133b5674ca661c58ec0e04ed536c","sha512":"41e0323444c4f02e4b4da438f1245bc589f2dc6e951f7a349c798c3b3f35670da5c9e67fc3838746d33e631174ae43b3ab89b7210b88ab313585da44f954a148","ssdeep":"","tlshash":"f411929ad7a75b34755a4210cb74a5303ba264bf5020f6983eef6620bf159b0508617e","first_seen":"2025-09-26T20:57:34.681272Z","last_seen":"2026-07-12T19:44:42.668648Z","times_seen":7,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:26.156Z","timestamp":1783876586156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:16:26 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Jul 2026 14:33:53 GMT\r\netag: \"6a4bbcd1-c48c\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYuClLk7PrLpUcCah7ejOXTu%2F9%2FhHao3vKNJZOJynQKnvMYjdXKPM4rqDCYgUxA6XA5SdhbpnvP%2B3YQqNUAa40ZXngNUElQ9TAI8X5whpffsnGO0j%2FAju46tiKd3yJnPyB4joS2f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1b2177d5d0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51058,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-13T12:27:52.214705Z","times_seen":22400,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"apps-kyberswaps.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"apps-kyberswaps.com","domain":"apps-kyberswaps.com","tld":"com"},"ip":{"addr":"104.21.32.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps-kyberswaps.com/swap.htm","date":"2026-07-12T17:16:25.737Z","timestamp":1783876585737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps-kyberswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 13:22:32 GMT","end":"Sun, 04 Oct 2026 14:20:56 GMT"},"fingerprint":{"sha1":"F4:E5:CE:41:C2:ED:6C:51:C0:7C:CD:25:C3:9B:17:F3:32:A0:40:64","sha256":"8E:37:1A:8F:67:AC:EE:DE:D4:08:DA:67:A0:97:32:0B:7B:D9:6F:F3:61:FC:D2:49:AD:C1:C0:BC:EB:76:A7:65"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: apps-kyberswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://apps-kyberswaps.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 14 Jul 2026 17:16:25 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g0nXq5Cwit4jaSdCoCDKMulScThASVPaWjJjyEgSknQ9g6Tc3g6DEsfLDIes%2BtoHXhX1u3qMm%2F6%2FPpuDNLMPJJfJIUMXkQ8G5rCYPDdzKL7YdqKEaQUe4ebE2O80u%2BXqV9mXOk3x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 17:16:25 GMT\r\nserver: cloudflare\r\ncf-ray: a1a1b214dd300afa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-13T12:16:58.694482Z","times_seen":394696,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"apps-kyberswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}