{"report_id":"4f89da8b-8fb3-499a-923b-c6ed71f93c07","version":0,"status":"done","tags":[],"date":"2026-07-03T02:29:24Z","url":{"schema":"https","addr":"chewyswap.live","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"chewyswap.live/","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"title":"Exchange | ChewySwap - ...","dom":{"size":391096,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (515)","md5":"f2ddc71403d228bcbe90536f73ebcaba","sha1":"5e8e2010e3556b6c808a52eceb8f4051ada3ade8","sha256":"51247d4eaa4d056c138c066765d97875b50d47f830598a57ba6b5c1b8353f3b5","sha512":"3cedcc5ff230e083a9c74bcd1375e7ff17f33f11de3702a400bb0a71d66aa6ddb607fbf22ffadb3d9d2aca3a9b6cefa00076042c5afc88e56f4d36f62a335855","ssdeep":"3072:OY1UIZ0QvLKFS4s4U2MKFS4szIamMImLcTbUJUoh2UJU/YNB0MhbzPKQvLKFS4sm:OY1UI0QuF+FgVQuF41A3","tlshash":"5184faf947b1d3a8adc7dbacdf269059650da0afd5e2c784b3ac86548fc34c8e14e844","dom_hash":"domhash287aa4ec8bbff5365f1285b8a299b8a2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"chewyswap.live","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-07T02:29:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"chewyswap.live","ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-03T02:29:25.270347Z","last_seen":"2026-07-03T02:29:25.270347Z","alert_count":15,"request_count":15,"received_data":674076,"sent_data":7352,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"chewyswap.dog","ip":{"addr":"104.21.38.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3072041,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":316330,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chewyswap.live/normal-2.woff2","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.672Z","timestamp":1783045734672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /normal-2.woff2 HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 30 Jun 2026 20:51:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19496\r\ndate: Fri, 03 Jul 2026 02:28:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19496,"size_decoded":19763,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"201d1d24b464e41d18e57dc58687f055","sha1":"d35fdb2a75da697dc080ced73400fc394f6cf4b8","sha256":"c3c4f89f25c7c8343a8b8ce0a120fe2c419809a1e92cc9313cbb5a36fb10a411","sha512":"8c695fb5dd450e0d4355f898d657d6d5c943c5c049284c9b32c017fc89d82296dd84b93abe8ed5ab8c44a2a480515d37e12b1dc3c8f2532406108d849533e93e","ssdeep":"384:IKA0aP4lPNAX1S8i6ePT1EEgJM3tgs4+fWjg+lva3AXnpj9gx:IRyWJeeJwgsLf0vg0XI","tlshash":"fd92d18fed917bc8f29d04ae94830ffd6877b10bd1a081790ad464419ca87766a6dc47","first_seen":"2025-04-24T11:01:06.88202Z","last_seen":"2026-07-03T05:51:30.983548Z","times_seen":3301,"resource_available":false,"data":null}},"time_used":5084,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5058,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/2000.png","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.687Z","timestamp":1783045734687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /2000.png HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:29:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 20:51:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8473\r\ndate: Fri, 03 Jul 2026 02:29:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8473,"size_decoded":8738,"mime_type":"image/png","magic":"PNG image data, 183 x 183, 8-bit colormap, non-interlaced","md5":"e85fcd426bb8462e06325a13b10bcf54","sha1":"050b041f69d97f67ac44c63e377a8bf8cfa63182","sha256":"24f04e98561ee9d191c98f8143354eaf304ccf17c4aef61814a05f713a3e136b","sha512":"da7928f3febcb1e946dc274aebd45b8144c46694775670affca7a7d885d8de76be3503217cc1c2f2e4bbec1e9e1c808ee2b749a20c755ae7d88658a12a788254","ssdeep":"192:/VXVNu8jOPTFKlciak/tf6dqPsD030m8IzCrb+AWFxz:/VXBivia6YqUI0gzCmXbz","tlshash":"06029fa49d4c9c39cef729f5442a6fe0a357014e037896e238eb01a02d864787454bae","first_seen":"2025-06-27T10:38:09.137784Z","last_seen":"2026-07-03T02:29:29.671516Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6046,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/157.png","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.689Z","timestamp":1783045734689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /157.png HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:29:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 20:51:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15549\r\ndate: Fri, 03 Jul 2026 02:29:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15549,"size_decoded":15815,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"61deffbb87d3c6159e475595a437aae9","sha1":"8ada76ab4249e10fec13e3f471caecc78aae9d39","sha256":"55869a3e51be3d7afebdcb56539c7ed527602a5bb882f5f732e1560b0924e98c","sha512":"425ed73844e4f068810e8cdc2d6c537d33017d2e90d691ca8bb3ac91faf36b3f6b230069d940669517a5403eb33516c9458c763c43113ed8ff45ebf3cd6cee40","ssdeep":"384:ggO7MgRYpVFvGlftiXkatrDqWF0NUrSbRAsC8TLast:fOggRYpjvIi01aKUWKsj","tlshash":"b262c05a8206fc84a24fe140d7cf167c8207e63919b5adbd0dff72711502a06ffe1569","first_seen":"2026-07-03T02:29:29.67479Z","last_seen":"2026-07-03T02:29:29.67479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6062,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T02:28:51.788Z","timestamp":1783045731788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 30 Jun 2026 20:51:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 91399\r\ndate: Fri, 03 Jul 2026 02:28:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":477765,"size_decoded":91829,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (304)","md5":"4083109b6abeedbe5a8434ecbff42b3d","sha1":"b7cf8e19c215ccb67ca77c9277c230599034fbe1","sha256":"2c3eb0b34a4416ad539f93a7a9ecea582d348223583a9ecee987c66d66dee0cf","sha512":"1d2fcfabaee866b6f8bfd70009f074b51932cd2a1775aab365ba19f148ac4956275322f44e9cf7543d19c7ffd969c2f7e01fa07707fb86fa67590ec10cd71fcf","ssdeep":"3072:PW1UIZYQXdKFA4a4W2EKFA4aBImQ4IqbYrxUhUAhkUhSjYtGK9brBSQXdKFA4a4I:PW1UIYQU/sLodQU/rbof","tlshash":"8ba4e8f947b1d3e8a88bc7acaf379069650d90bbd5a2cb44b3ac96548fc34c8f14d944","first_seen":"2026-07-03T02:29:29.677757Z","last_seen":"2026-07-03T02:29:29.677757Z","times_seen":1,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":181,"connect":63,"send":0,"wait":128,"receive":66,"ssl":133},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/aad044f33a1790d7.css","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:52.559Z","timestamp":1783045732559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /aad044f33a1790d7.css HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Jun 2026 20:51:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1250\r\ndate: Fri, 03 Jul 2026 02:28:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6260,"size_decoded":1737,"mime_type":"text/css","magic":"ASCII text, with very long lines (6212)","md5":"65acbf5d7038f231feb68cdafabd6c4e","sha1":"41de447a6c599585e5625ba504ecfc60a7c83463","sha256":"7263ae17d43160d391e365566f28425d5d1bef02fdd0a6e7533167db947b1a13","sha512":"d15b8376a4515f90dd7e66bccd34cd71eae10819301bc3f271d98347e671bc23a2b282ad3fd9522811ce7aae3be5b59e241b357c311ff6648c50397fc9b476cb","ssdeep":"96:rXuPxVqjHnGEiS79Ve7N3kGMIyX5FDSCSyQDGt6VnDrA8eGl7RDYW5:rXW7nShV6H3yJFJ6Vw8VNRP5","tlshash":"76d1df22d051ac2bbe2bc1fed044ff5abb189e09c408178fbf3550ca75649b321d6b65","first_seen":"2026-07-03T02:29:29.680675Z","last_seen":"2026-07-03T02:29:29.680675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/chewy.webp","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:52.576Z","timestamp":1783045732576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /chewy.webp HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:52 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 30 Jun 2026 20:51:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8144\r\ndate: Fri, 03 Jul 2026 02:28:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8144,"size_decoded":8410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a9a09add6c4ca3ec05ba51e8117baa7","sha1":"91a6cd23260af8c6807ef329cff52b4f10c5c900","sha256":"dc525d260a999d78d859b0f454b9e46d250d6a4b7acd5fb433572b8afe109fb2","sha512":"d4a6d162fa56e30a8ab09d001007fcbb4c8f17f2a4810a92b69fba7130338c0ae2253d305d204406bbba388ce31507ffd633f3c8944e2f28f9518f86b91619a4","ssdeep":"192:Xkqk1/mP9Ewc1d10isRQXsPs5CUoBmVhQks+GDA8dyDln6s:XC/mPi/fuisfPs1QR503","tlshash":"fef1af58147b4fa29aa296355f34402ebdba6e2d14d448b73f90b0593dbf422dcd142f","first_seen":"2026-07-03T02:29:29.683252Z","last_seen":"2026-07-03T02:29:29.683252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/normal.woff2","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.675Z","timestamp":1783045734675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /normal.woff2 HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 30 Jun 2026 20:51:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19900\r\ndate: Fri, 03 Jul 2026 02:28:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19900,"size_decoded":20167,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19900, version 1.0","md5":"41863b69f4379590d44e58b6e4dacc90","sha1":"65c95e5b73995e7e069c22e454c7943c5f0066a5","sha256":"b069fcda825a4946f5b4dd37a824ae176cefd889c1a400afdc5efc9d39e72bf9","sha512":"d6a160e96c5971129031ee799c4f13469ea69b34cd3c36677ae7371bcf52c222acbf753fc5dd063f647f506bb2f0e673da42d701104fb8cf1b76075267c6784c","ssdeep":"384:09Gbk4KuHOnO43tfrzg+IQts0G0r0UAPKT+P8ZYXxmKAy/0nz6Wusi/Q7n:001KumOARrzggi0dUKk89Kwnesi/Wn","tlshash":"3e92d0313e99c11afb03dd1b764f066013ac8a12936bc57524f3d3a59d6dd860d8f69c","first_seen":"2025-05-04T12:49:03.394628Z","last_seen":"2026-07-03T02:29:29.6855Z","times_seen":142,"resource_available":false,"data":null}},"time_used":5081,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5062,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/normal-5.woff2","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.678Z","timestamp":1783045734678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /normal-5.woff2 HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:29:00 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 30 Jun 2026 20:51:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10632\r\ndate: Fri, 03 Jul 2026 02:29:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10632,"size_decoded":10899,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10632, version 1.0","md5":"3718f4b13325e3890476f140ac8cafba","sha1":"6b84e3b0cfef137151aefdc4d622a806ab99b53c","sha256":"50a775bb97745903cf0133e99c9bb007f82cf1233798c5e173eeed9a677b70ff","sha512":"d4e4df4943ffdc4382c33b29edd23befd1a525da8f6f5342db2c0cf670c5bcf56f352605ae7c49017ecfa5a2283ee44a733440bfac4559359fbdb9b7b4294df6","ssdeep":"192:SAU/nSQh9RMp15OWuAkEIg9WCruU959Jw4lJgtI6Kl:SnRMpqTUt9xj","tlshash":"a522bf81b280c8c5f7005975c6cb9366c9ee02afecf76c302ab1faaf64491f99645907","first_seen":"2025-05-04T12:49:03.528052Z","last_seen":"2026-07-03T02:29:29.686615Z","times_seen":460,"resource_available":false,"data":null}},"time_used":6055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6055,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/us.svg","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:52.572Z","timestamp":1783045732572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /us.svg HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 30 Jun 2026 20:51:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 308\r\ndate: Fri, 03 Jul 2026 02:28:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":650,"size_decoded":621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7dbba93c48658227ab3cee51c82933b9","sha1":"8bda8cf1455da948175a4897ca64533278673c26","sha256":"633325cbe879d698584238b9955d850b4a34e7c5dcfb7622bad50cec119214e5","sha512":"526ad971150fc5510a20197b1bcb68c0f9d68b208575bd4fc8200848cb946e32c35db5f20d84011f593f58d0813a56850dac834301e7966f3f2cb5b8a2bbaaa1","ssdeep":"","tlshash":"3af0e1749cac80588c247b0d2f7c3aec31f3a1e5938c30cfe0841870531555e9a4b88d","first_seen":"2024-07-01T01:37:19Z","last_seen":"2026-07-03T06:57:56.466537Z","times_seen":382,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/favicon.ico","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.132Z","timestamp":1783045734132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:55 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 30 Jun 2026 20:51:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 42312\r\ndate: Fri, 03 Jul 2026 02:28:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42684,"size_decoded":42626,"mime_type":"image/x-icon","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"c16560297316865f6fbd7f4d40574733","sha1":"30d31fa6209e194115c59dbf4b694f9119753a05","sha256":"91effae7364b45340bfb04592d3994983b0888c20a19ee1748915efad4a7ee21","sha512":"9f0566d635bdce8b40ae5ad94f8ff7568662c7e75a71686cb138ef31aa2937dc3db268bcfa371eac32e7699b672a1cfe864bc1df592b1c5288a63d17c3e721b2","ssdeep":"768:6EnjNrR5Udb0jd1jm4TqCNV0sF84sMwtDrj4jhfCWHaykcx5:6EnX58057tv0sF8PnrW665","tlshash":"5d130256fce2690ef7e41b2833afdd520ba3504a4e1061f62f557c6cd9b40b5293abc2","first_seen":"2026-07-03T02:29:29.688486Z","last_seen":"2026-07-03T02:29:29.688486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1027,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/back.png","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.507Z","timestamp":1783045734507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /back.png HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 20:51:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8687\r\ndate: Fri, 03 Jul 2026 02:28:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8687,"size_decoded":8952,"mime_type":"image/png","magic":"PNG image data, 500 x 250, 8-bit colormap, non-interlaced","md5":"160856a5874b29585ed4f24fbbba0bc3","sha1":"28f3951a27a9dd6c73583a4439f3dd4416fb019c","sha256":"ef9f1d32176aa1275de8e58d288e4193e3bfa3cda47f3e1d2889b9216daa90bc","sha512":"5189f6561ecd1e72c67f36de4ff8997ec5397732660a28ab47b2c8693fa6b7a4fd7e507df525006eeb5689c30b5934f8041b9494abf0af3253886b69efe9244d","ssdeep":"192:dHTe3gE4SmyS9SBNB4tIoxAyx9yldKa5zFT:RTLE4SmyS9SBNa7xX9Sdh","tlshash":"4202bf93cc94c8431181ad3bc2a745d6656b8ef08c79307a848ec67fce0c9564a9e376","first_seen":"2026-07-03T02:29:29.691064Z","last_seen":"2026-07-03T02:29:29.691064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4043,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/5qe9foho.php","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:52.562Z","timestamp":1783045732562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /5qe9foho.php HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 503 \r\nx-powered-by: PHP/8.3.30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Fri, 03 Jul 2026 02:28:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":284,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T10:08:27.684911Z","times_seen":16939036,"resource_available":true,"data":null}},"time_used":1889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1889,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/109.png","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:52.574Z","timestamp":1783045732574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /109.png HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 20:51:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15549\r\ndate: Fri, 03 Jul 2026 02:28:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15549,"size_decoded":15815,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"61deffbb87d3c6159e475595a437aae9","sha1":"8ada76ab4249e10fec13e3f471caecc78aae9d39","sha256":"55869a3e51be3d7afebdcb56539c7ed527602a5bb882f5f732e1560b0924e98c","sha512":"425ed73844e4f068810e8cdc2d6c537d33017d2e90d691ca8bb3ac91faf36b3f6b230069d940669517a5403eb33516c9458c763c43113ed8ff45ebf3cd6cee40","ssdeep":"384:ggO7MgRYpVFvGlftiXkatrDqWF0NUrSbRAsC8TLast:fOggRYpjvIi01aKUWKsj","tlshash":"b262c05a8206fc84a24fe140d7cf167c8207e63919b5adbd0dff72711502a06ffe1569","first_seen":"2026-07-03T02:29:29.67479Z","last_seen":"2026-07-03T02:29:29.67479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/kyc.png","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:52.577Z","timestamp":1783045732577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /kyc.png HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 20:51:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16497\r\ndate: Fri, 03 Jul 2026 02:28:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16497,"size_decoded":16763,"mime_type":"image/png","magic":"PNG image data, 349 x 148, 8-bit/color RGBA, non-interlaced","md5":"a92db9e968ce38493286158d89ecbd06","sha1":"7846baf11e3899d75a5f7211fd9cfd66c4fd69e2","sha256":"f4b6885f5f8358d39019d660b8b8cfea77b5995198609748e235e9011f754da3","sha512":"a518398735dd6666b3ebf6eecbd629f07b94e6a1bf95a6566516517e867fa8e033a613998b4639dcdd34e5e8a85eaaf9a7bd218594a0fafcd542ef8d0e2586c9","ssdeep":"384:h+iAJfftPSJWNquS6tCvJC7pJ3Qwb1MSUDKc3AXtnLMv5Dn:J8SJR32OQKSUNwdKxn","tlshash":"f272d0e673547ade8630356fdf515ccf4694b1e5670d1aee3d8b02e8800ab9c3e142c9","first_seen":"2026-07-03T02:29:29.694293Z","last_seen":"2026-07-03T02:29:29.694293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.dog/logo.png","fqdn":"chewyswap.dog","domain":"chewyswap.dog","tld":"dog"},"ip":{"addr":"104.21.38.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.129Z","timestamp":1783045734129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chewyswap.dog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:13:51 GMT","end":"Tue, 11 Aug 2026 03:11:36 GMT"},"fingerprint":{"sha1":"88:7E:4D:4A:C9:DB:4E:B9:05:C9:13:33:87:0B:84:16:77:58:2F:9B","sha256":"87:59:6F:81:D0:D2:AF:A9:35:0D:49:35:48:F2:4E:1B:D8:05:25:BA:AE:FB:1F:46:1C:DF:94:F6:1D:A7:BC:A5"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: chewyswap.dog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Fri, 03 Jul 2026 02:28:54 GMT\r\netag: \"38ed7850455dbbfc9a234782e59d3561-ssl\"\r\nnetlify-vary: cookie=__next_preview_data:presence|__prerender_bypass:presence\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KWA3RH36EB2EJR9494JN5V56\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgAea93dkawh1NCFQ46LhbupX2sh55uw1AdvoQ2qA8%2BmSgQFGp1kLNqtj0xjPjPO%2B7XIpuYsQ6%2Bf%2Ff8wJTtrPZqfN7Lso7SurXF3LwyrHetO15metH81MraT35pa3YEr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a15275a0cee056c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 315391\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315391,"size_decoded":316330,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"57f71d5fe673e08d2f22f90f5d59c549","sha1":"4f8999246b2e91b1bf51e420e6a06f7bb873e142","sha256":"ff58f01e0e06a051e81852741066a951449170a1bd28f77e47d3b79de99d619f","sha512":"79ebbcecc6199e97b3340f0b7fe1b3a6606d63b402a050e51df4e97c989f9ee60a3854eb0b83cc2c8f4d9765b3fa56308f4f2f3fc0076ee3a956db512886d2dd","ssdeep":"6144:Trm668ldXCUFeZDvUwzQAwBSpZFuhl3BB753sChwklqCVBVg5M2ljZpEr:m1aZeUw7wMpZFu7BB7JhV/gvj0r","tlshash":"a76423d8dd75d9a10aaad7a2000df684ed3921119a5e490c14e33bfd6ec41fe2b48bdd","first_seen":"2026-07-03T02:29:29.696266Z","last_seen":"2026-07-03T02:29:29.696266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":353,"connect":34,"send":0,"wait":48,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chewyswap.live/normal-7.woff2","fqdn":"chewyswap.live","domain":"chewyswap.live","tld":"live"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chewyswap.live/","date":"2026-07-03T02:28:54.473Z","timestamp":1783045734473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chewyswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:16:02 GMT","end":"Mon, 28 Sep 2026 16:16:01 GMT"},"fingerprint":{"sha1":"F5:98:3C:70:8A:97:3E:39:E9:32:AA:EF:94:AF:13:69:31:39:C5:6D","sha256":"C3:C8:35:97:C7:6E:FA:21:8B:8E:EE:E5:37:E4:23:A3:84:67:64:6F:A0:D6:28:F1:96:C3:56:4C:BB:F9:39:7B"}}},"request":{"raw":"GET /normal-7.woff2 HTTP/1.1\r\nHost: chewyswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chewyswap.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Jul 2026 02:28:58 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 30 Jun 2026 20:51:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19300\r\ndate: Fri, 03 Jul 2026 02:28:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19300,"size_decoded":19567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19300, version 1.0","md5":"b149de90fec0235ecc74597251628035","sha1":"a59ae1d58d86daa8759832a3475be3c1c26960e1","sha256":"1e856b3a04f93a23ec758ad37750f4dcfbde02334fd30358d02d5d4db3052bf2","sha512":"108c4270a63d0b99409a1102272e0c3a79200cf79663d9a6bfa999d9a978ee7233c06e89adcb5937c869e81ee70bc4e71106e8c644c9fd9303081dbe052a7dee","ssdeep":"384:5wjcwLP1szEliwu0gcAHKnawvrKNDggVRrw5x0jsE93nT9um:5wj7SKu0KK/v+FNrwDcTJnTr","tlshash":"a982dfac152fdd52fb37423dc5cd4ea4df8286f5e564e49008ab637f298201a3ba2173","first_seen":"2025-04-24T11:01:06.876956Z","last_seen":"2026-07-03T07:25:07.402542Z","times_seen":5378,"resource_available":false,"data":null}},"time_used":4075,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4071,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-03","alert":"Phishing Block","trigger":"chewyswap.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}