{"report_id":"54a9816c-d276-44b7-b152-5cecb8f1bc13","version":6,"status":"done","tags":[],"date":"2026-04-28T13:26:32Z","url":{"schema":"https","addr":"mayanswap.com","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"104.21.54.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"title":"Mayan Finance| Bridge faster. Get more.","dom":{"size":116932,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10515)","md5":"b6daaceca2f85e925f80e81dfcabc12f","sha1":"335c919e54dba26565e981cc83cd38facd2dd260","sha256":"0b01a0aea52202cff2f1d75a7deec6643756b7fda5c8dc3def28e2acb5a024cf","sha512":"0f914f22c1b3817dd5e735a38c437fc08305ac734bbc1d2a3a007d74a8b56e14ef1ee409b562faaec3bc68b58e66c4f2d3d19f2db3b236f8319ca0dbd229f2b5","ssdeep":"1536:t0+bR6hhUubR+oUWiunJn0znbJaNG9Jz5//quvT84KOiM9qTch6h2M+vzoC7nA:m+bGaRuRAtp/A","tlshash":"40b30bf0a39c71b5900783e9f972619a79ce14fefe258a84a3f8d95177e0c4d491d883","dom_hash":"domhashf5b92afbf6362775e0969b4e186c800e","first_seen":"2026-04-28T13:26:37.483666Z","last_seen":"2026-04-28T13:26:37.483666Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mayanswap.com","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"104.21.54.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T13:26:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mayanswap.com","ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-04-28T13:26:33.131047Z","last_seen":"2026-04-28T13:26:33.131047Z","alert_count":116,"request_count":58,"received_data":2953479,"sent_data":26871,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75484c8f3e50c7d56b93563cdc7cebeb","sha1":"0c19b22e760c8405e8ac17611d39c0cfa1fbd302","sha256":"b001dd0de2757494178d426319e162a0cc0621c53a00b588b0e6dbad1d0e2a21","sha512":"1ffd03231bdb186cff7ce52d43de14822b09b91e18fe038906f5fb7c7ce956ea147716b1200d402b65cdd0da93aa2ee339f26a088137fc668d6f3dee69e231a6","ssdeep":"","tlshash":"a40168dcfab331f112b7a0384fafb651b16248a7508ec4217e5d98d46fa410987b27b6","size":750,"data":"","first_seen":"2026-04-28T13:26:37.576658Z","last_seen":"2026-04-28T13:26:37.576658Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b7695dc6078ccb0ac83cc5bc9f13fd0","sha1":"bf465bad2dae75105f80d180403e314a76d655ec","sha256":"8f74fa6cf0d588af61c47c23ac907a3c85f3bb71332dbc9af02d044ec56bb267","sha512":"9ef31d8094b8c49bfca4f953a6cf92637418de410bb6b47f8f1f6514a7d441d4f187a25c6e144759dc663621bce62fcd14ff196f3be4bcaf056b87a56ff04dea","ssdeep":"","tlshash":"09e026ceeb0e091f455e8b6f702ad3ec247e40b56d8049eb3c8cbaa421e6914a649805","size":373,"data":"","first_seen":"2026-04-28T13:26:37.578111Z","last_seen":"2026-04-28T13:26:37.578111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"145518199f364bda6cf20f3793c2eff6","sha1":"4f80be805ecaa45b97948c97390e7e3d04ffd50e","sha256":"c022313247a037347e0d8f338d6ae8a277edc9f7f46de41e2c2d87f5751ee5fa","sha512":"481627f12b6bb0cba29f3980dbe030b38d7dc6bb1f2ab46d01ac65510b8e1bb60538298b3c17df1930c8369d3d4b925d487e8256ba5c8d8fc1d31232a6ed9803","ssdeep":"","tlshash":"12f04e26621c213aec5920a9c7ce15ced5d403b9dcdd41edc816870629f0535172fef0","size":634,"data":"","first_seen":"2026-04-28T13:26:37.579625Z","last_seen":"2026-04-28T13:26:37.579625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-09T03:42:01.551155Z","times_seen":3239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fda2f3871b89093c434cbbec20c39eb","sha1":"67ea22a1a55bbb1ab73bdb2c3d9e650b81447400","sha256":"fec67b3f6014282f120b7956477acdc314d04bd1ef52ca031fad003d940ed5d2","sha512":"8077ec3bb6aa35a860e193c5a9ff9cc0b3d22625bdaaf02aed2bbff2595cd27940f3904ebc9e9e098b4ddf511c9b21c5e56b04498cca5ca2762b8b801f2c3e31","ssdeep":"","tlshash":"a951fdac9de542395c6b207a9fffd144b5708117200aee257c8ce5036fa0d501bfeae9","size":2797,"data":"","first_seen":"2026-04-28T13:26:37.582461Z","last_seen":"2026-04-28T13:26:37.582461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/v8c78df7c7c0f484497ecbca7046644da1771523124516.js","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-08T13:59:29.124789Z","times_seen":78335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91058c9b039200de9c2ae36d7b88654c","sha1":"274675e10a746b418e4e3c0b0c9e3fa6cef6e6cb","sha256":"09161f5df38c26c860145f478209230ef2694b96c9411b9617b71ba56a001624","sha512":"b05a6a5c3af0f66d2654907c9d83699b1d5ac12a4619ec6a17e86d9cb1deac5410ec5f88153d2185e9fa7e93cc453b8728fc072381ceba3793c0076eaf50c874","ssdeep":"","tlshash":"c051f198bdd262319667113e26bfa744b1758423104ecd09ba8c8d41afe4a690779fd4","size":2853,"data":"","first_seen":"2026-04-28T13:26:37.583975Z","last_seen":"2026-04-28T13:26:37.583975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mayanswap.com/css2.css","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hgDw8bBa%2BmGZOsR7tBZw%2FJYvYMpRl1Lyy5s7tAwLHETUG48KAH9fe%2BryVAhn%2BjtCXQU7IlqWvKfTOeDvp%2BHJi%2Bl3m18X4feD0Q5v0wUi6uVaI%2Fcr4dSPuDgXRYUDQ%2BXU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"adbf6002a9965c1e0732c02c08ccb237\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665a9b8e4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5089,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d0138808043f19cd183da8a26719b1ec","sha1":"0a4d395e5deec7712f47dfdb49a9044fc8bfe361","sha256":"8f7f48d6435866551a7ca6b651791a1ed46c4d5a32fcdca28d3daaf8b263e08d","sha512":"d1262b8c79b29a761a55fef48a2e978ace1834e32a04007c172028765a0cb4735fda2761b5156ad2bb8034d341e9884637c762e9774242a611cfb11e03dd8229","ssdeep":"96:cNQOEaaQOEa3Jc+uhQOEa8NHOEaEJc+ucOEa8NIYg8a/nYg8afFZOMYg8amYg8aN:cRSjSPAYwG/YGO1GzGaqGH/4Obpa6c","tlshash":"90b1a990046a9200e7971cc137ce7f37ae5db2407049da78affe1468ac9ed6593a5b0c","first_seen":"2026-04-28T13:26:37.48853Z","last_seen":"2026-04-28T13:26:37.48853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/2.eCM57Vvl.css","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /2.eCM57Vvl.css HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1skYgYVEk%2Byia1BteR9OW3JHj5okUrHgBx6HJEcn32tk%2B9KhpEtwbbkn3sg%2BEsjicA1C0dhD1EBhCW1weOwpBBH5m0yuDNNZ%2F5bfm%2BTl0LtD4jXLj9i5MhGA362QB%2FMx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f076259f4c6a14d93461269bd5b08c31\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665a9b8e7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15359,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15358)","md5":"5e02e8d8e3d167a23779256b3949651c","sha1":"45a6026db9e40768bd5eb67e90d39df5f9597375","sha256":"7c8d1bc10ba8817948e7fec3f8f00922924eef9658904f1bfa2e50a2725c7b7d","sha512":"dd5c2b110983990486931b9c127879a5dda344f61829f4e9a355f526b9e5b0a2d89b77750f7aede79cee2dfe4daa8b716f6a79bbd01e73ef4dcc84190817033e","ssdeep":"192:gtuyU4SbxxlTCZNSIvcsYPCoIGZhZN9wZNu:3yU4IlTCZNSIvcsYPnIYhZN2ZNu","tlshash":"a76295543154203e2887807fb4715749d36da8c4fe6b62caaba3962487eff520f2768d","first_seen":"2026-04-28T13:26:37.491854Z","last_seen":"2026-04-28T13:26:37.491854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665abb963783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/7f065696244bba566f3908986cdafdc74926c54c.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /7f065696244bba566f3908986cdafdc74926c54c.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1317\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d51a1f14fe96aae55ff20d4b9d5c90b7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0n%2BMukRA1e%2B4an6ilItLZeiVCm8H50uaBd54ggSjl3CJ2TcA%2BksUd4VvMoHJtUToVfqLSheX62FsIXpF2OPLQ%2FrkiCSKzQl7YL0KOQAPl7spwE%2FyCnWbc3Z9aP2OcXBQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c900783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 80, 8-bit/color RGBA, non-interlaced","md5":"f90acee62d17caf4bba58c72ff5d2c88","sha1":"7f065696244bba566f3908986cdafdc74926c54c","sha256":"c6f7fdcc060c9ccbfa5f601769176bd37636a6b89ee4c58e525cc77704716e63","sha512":"5d7567edb98cffaf5dcfde399f4b75e4506280dfaac2405278ac9e7750302922b0cc8f70dd699c0f6137d9ca8df992dec365228788e7a4ebac556755d18786c3","ssdeep":"","tlshash":"5a21f8db4761a6fdda07a43d6518ab61383dca067a8186b5fcd48802002c4ec49c530e","first_seen":"2026-04-28T13:26:37.496961Z","last_seen":"2026-04-28T13:26:37.496961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/RIVI.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /RIVI.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 46923\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b033140714eb8dddae12cb3718858178\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2pXG1YeNzkamTY6u90CFBZDGlaxw4ulwCJnxhlaFWI4wkNpfX3c%2Bzgu70FSDss5l2IFdkxF%2F5HVMrrbHcCF3Efjb85Hc%2FCxU%2BFoX2z1T3u8h800IyiIcYlMVWH4Ls9E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d90d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46923,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"4373e3d3ec05dac7d6de13170b31426b","sha1":"238ff362f3b5affd57b21e5673c3baa5cbe98cfb","sha256":"a996df4491e93b1a50e4e0d13493f660e0fa0895ee6d708a7cd246c21872b08f","sha512":"1112ba3b8f06dcb6b8360bbe714db927f4ad5f5e6272b06b463ee63f1d0095ba9d69b3ec4d5bf8586b264daa6c2edb74aefecb04aa6c1e24dc7a0fdb5f5fd08f","ssdeep":"768:M2bNiQ3lA8JmlbegkxuZNIVxOdCogiycNPBC5DfPC9Fw7:VNZbeagcuZe6dCyZ3nFw7","tlshash":"2d23020bb1df1f9ff05f2431570c12406e8b9a66ae6b3b8adcd416146bddbc4e728419","first_seen":"2026-04-28T13:26:37.498999Z","last_seen":"2026-04-28T13:26:37.498999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/Arun.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /Arun.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 25449\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"097f8d4ee14c97e2aac8b72304bc0544\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HW%2FgMy26RkbAjsKkihIwjO1OPr9yQGorwJruirhbaRLrzCysPzK4w1AdcMTcZCuSDA9aq1QWOW6D8BodmlxdCRY8w54Y%2BlMl68YM70VNvsSBKEuMEyfrjSF69TtWQ1%2Fn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d906783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25449,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"3d077471111c2d4ba481bc296b08ba49","sha1":"44d461eb3e5c987c291f356de1bea72ee0e97ad6","sha256":"80293aa3f92aac1ddbd55c64203c2f8e5608f2db448486207d2ba77d879c6b25","sha512":"c2c061e87b9d69635ab43bbf2e88137f1f2bde8b18899e24a8c9a4c48d575610045e08b34de354b8ee0ca1fb43e66d1efd6c61176491128a9de3b184d4dfc774","ssdeep":"384:s8WVym17/aon7egRA479SZr36gsO7digEm0tFUaDN/3Wh7WLFDrMw:61CwdSZrKge1tFN5Gh7WBAw","tlshash":"c8b2e114b589d40bebfc2075294dbf969b72abd7a548cb74c8c2c02f73760c02fa0589","first_seen":"2026-04-28T13:26:37.500919Z","last_seen":"2026-04-28T13:26:37.500919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/interob.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /interob.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26311\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3cb079807081967f9e0428b642a41ed7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYW9S8WptCb6nNu3cpGX0t5T0FTxr%2FcM%2BbaAI%2BeL65NgQRi1CZ71tKuF1M%2BSum6RWPvvehPcW%2Bi%2BCThI2P57HZBvMNHcBPRpDofFCXgB7pKZksqVOogWMhbr%2BAYrTykx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d907783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26311,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"5a8414e4535d4133b7f35d0cc2c36dc1","sha1":"8cb122c719a01badd0ce4e85a631b1670a8065f3","sha256":"1b02646a1a6404197370749d7bca6207fc36f0086b5a79637990b0ab3d3c2ca4","sha512":"130202924044a0d3da7d8994c2e84d0fc3fb2b62ae409c4fde0b81c291a356a336b451aca6fe173cee4c54669d383c853d59f2aad7c9fbb40866fdc62d3e61c2","ssdeep":"768:vgoi4OBp5dLxnXRk+96yBbPjS/srQ3M2CjIMy:I6OnNnXRfUiQ3DMy","tlshash":"38c2e10301222a8cda5e38faf7168b77e330e611b97ec5b3ce628947df05182135173a","first_seen":"2026-04-28T13:26:37.502331Z","last_seen":"2026-04-28T13:26:37.502331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abc978783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/cdn-cgi/rum?","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\ncontent-type: application/json\r\nContent-Length: 639\r\nOrigin: https://mayanswap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":639,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":730,\"startTime\":1777382769651,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"22481e05-df27-4a5b-8950-460dfcd5f196\",\"location\":\"https://mayanswap.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":12,\"domainLookupEnd\":72,\"connectStart\":72,\"connectEnd\":91,\"requestStart\":91,\"responseStart\":342,\"responseEnd\":344,\"domInteractive\":827,\"domComplete\":1070,\"loadEventStart\":1070,\"loadEventEnd\":1070,\"transferSize\":25803,\"decodedBodySize\":114820},\"siteToken\":\"c03d73d886ea46889d6a7e86d4969deb\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjS%2FzlfR1WoJrkn1%2FU0gCxhkX32mrm5EbrxiNhNHQXKcjDJk8jCu1JJ4J5FlmdWwcgil2I9xTuhg%2FBw4BjCKlYqRxoz60G%2FIw1qE%2FGmIUCdZaQDgt8P0UteuVbP3ucrL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3665ad29c2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-09T07:54:25.741107Z","times_seen":19410,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/6bc649b443d3f5cfe33d914d89bdc4b72255b5f2.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /6bc649b443d3f5cfe33d914d89bdc4b72255b5f2.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1255\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2d42e5efade88705f1be7c7c36a7e1b2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTdBkIkcfweubJQW1kYKM6QfGTQjxB92oRsy2DFDDZt8vzsRehmdyUxnT9d%2B%2BD4vEgYJd7Duh%2BmciiGvDkLuwiM6ppI4aW%2B33TwEDFOdwqA2ZHrpdgYgxzqv3FXna9jd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 33, 8-bit/color RGBA, non-interlaced","md5":"f4d3088701d5543e8305802e8def6e6a","sha1":"6bc649b443d3f5cfe33d914d89bdc4b72255b5f2","sha256":"6a35ed982b5f625b0b9c51fe723228b38537e3c9d9bd50a6040a58454e6b1d23","sha512":"da4db535356b39c1254f5c5d4622ea95aeda25cdaf458aeab1a912f7f7c042af0d552f9768629d6e74beeed2d3b8003038c06058cd106b44a1048db290872c62","ssdeep":"","tlshash":"3821b4d22bd94fb9d628c77c11a022e1d40fb32e415594d88cc67834d62bee6034bbbb","first_seen":"2026-04-28T13:26:37.504461Z","last_seen":"2026-04-28T13:26:37.504461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/6647d2b91b7d64e50624e2eafae786ae93c1b824.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /6647d2b91b7d64e50624e2eafae786ae93c1b824.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2127\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"49243f1b84761a9aff0195d8c7596174\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7eN4bRz8V4c%2Bib1tDfO1riiyhsOtt1hvrGrfK%2BkCavPdkrKmpXb%2BiTaGVRMdwlH7vye%2BdXSIcfM8t9OCJzwP%2FXugw2IlX8cvgW2DZzFLEKMYjJCEiILpF64%2FBfB7HhN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c901783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 182 x 30, 8-bit/color RGBA, non-interlaced","md5":"65cfeb4f9b3646ef0f5cbb52e08bb079","sha1":"6647d2b91b7d64e50624e2eafae786ae93c1b824","sha256":"c131b8e8787ced1262fc7f5176eab69d2a48da92c6b0ac1c8f13524b029c2acf","sha512":"d15bdb41cbb71a07f36c8dd405959a380a6b7c80e60b928d5681b77092c34ded1155f6ac2d2bc03ad8eba77b86d695f03388ee0581099badf117c552d72ceb24","ssdeep":"","tlshash":"b0413cde7fa700be4d4a8f4b636e78311078dd280057c4a4c491e0913150fe9a67114c","first_seen":"2026-04-28T13:26:37.50749Z","last_seen":"2026-04-28T13:26:37.50749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/2a434786c8b94cfde0e7f8a6b16e3d886cfcf485.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /2a434786c8b94cfde0e7f8a6b16e3d886cfcf485.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3525\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"54e6bb93575eb42e58f619ecf7b11412\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGYB63ZRaTrRNhFclakMsDieBlxD875TlgdshgR56s9Bux6Teuj5rG8mFjLEwokTyk5LnfDJOXPUbyqdZVaDqldMmpubmEJicU9om3W%2BRBsMEK2SIkUXiWfOTYrVrbFi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c902783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 64, 8-bit/color RGBA, non-interlaced","md5":"6d92433eda4e910d953b8ce2250b5527","sha1":"2a434786c8b94cfde0e7f8a6b16e3d886cfcf485","sha256":"65c3b423763c4eee03ac2cb4470737fb60c0eda31a9afed5b3431f262c26b78d","sha512":"8821bf9a4638d3324c88148d4ce7f0776a8c596e4cc7fbceeff76c4c54d11587856a7216be41388d3be08112f1d1ed1719b87f2f7a0afa288c834ce62b2a177a","ssdeep":"","tlshash":"017148c13b907789ac3c414a34f0046e4b566c0a25b3aa1f93c03cb97b4d8ee8d81d87","first_seen":"2026-04-28T13:26:37.509325Z","last_seen":"2026-04-28T13:26:37.509325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 358367\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-358366/358367\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1e7cc314a7f64f2474f3f440fe86364e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EI1CRyX7A4FJgYJF18saqvSb992QD9w45dhXb64P65PknRl1RKZA0bQGEbDkyCKTL7NZ0BkiT4IE84v5fwJoGNkx0ynmI9PVu6mkyiTwOk8knhY6jATY92gOICEtNIx5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665abb967783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358367,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"f2c931652ac66523ab9660bd616b9746","sha1":"bb618df484c6c1c2f811a98a7a83adb1fbe8a3e3","sha256":"e91f5abd5bde9542fc07682fd0aac7d9eea9c1b866a1fdfc264a5727f3528ffe","sha512":"9e9cc8d183cf6227aa84d4cdd349acbb7b80d8248841a1326072442b8e572e9ff7f50684e6005795a68726498fc70bf877a84d0eaaef95dd34c00d79d87ca5d3","ssdeep":"6144:DHRbEcmM4rAtSEUjfv6bzmRDEJpuaw08Vq/wXt18TVV3oqKUDwyHVf:DdEHM40tCDqH8Vcw918TV1SKHVf","tlshash":"a17423baa27beb10e887b172e707255a8e255f4660456c372d719ce0d4b836c8f64c3f","first_seen":"2026-04-28T13:26:37.510827Z","last_seen":"2026-04-28T13:26:37.510827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abc984783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/favicon-16x16.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 507\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"eb65442e6aa433dfa2023a621fc238e3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHBwyJbIfG5jxtccQuwFVY%2F7pwlPr021VXQE5rOmbqZS%2FVN6LwJ6RkjaDD3sAE7DGfTAzqX2FaRaxRnpccK8i40NYXp2CQt2JXprQdYxB0rgsTXNpHzxVYPHL0Mi5TGQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9f3665ad09bd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"7bb439dd43b6e3aa9156d227513ada61","sha1":"c7947ce6dc4332a5d3cea7e867beca43bcaf002f","sha256":"95fa6895986cd5525901a49e4b1ef99f61d948aa274449e3f2d8fd8478067df3","sha512":"7cd4e7132101a2f517d31e8ab63a15d82f7e3e42e3554ee3b7b3be51e819c97fd66bb5a546365c0430cb093296235b49cd6ca14cc5e45f1d187f854f1bd937eb","ssdeep":"","tlshash":"69f059f4e7e0e6b1c01b1616380a7692e992805f1693681466a8ea094c18fee69b89c6","first_seen":"2026-04-28T13:26:37.512724Z","last_seen":"2026-04-28T13:26:37.512724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/94fc68c3f62a3e2a89a9ac222305542431c6bbbe.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /94fc68c3f62a3e2a89a9ac222305542431c6bbbe.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 797\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2ec4f73f5ee25728096bc6d32eae0ebd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hh47OSUi46Kjc1BYy8Z2UyS5PIyCZURxWCgVOno32%2B%2BwT80E4TsZ9E25cBFWCstp656CmF8tVD3RethpRO0sfP0qCNvBDMVFnzsiQFdVhU4vOQfFiWzVZufNdc6xf8%2Fb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":797,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 34, 8-bit/color RGBA, non-interlaced","md5":"c0d61e19a817617be6d3787ea31499f1","sha1":"94fc68c3f62a3e2a89a9ac222305542431c6bbbe","sha256":"68cb049a17f53b2dc6681c6ce97258f19c9f653b56dae3db2b8ac66b8f2235e8","sha512":"e5f362764d2e08c1262d7d1f17715a2705d747d1b547df85c8ddce32b1f85044db38649677863efc39bb4e28e68987f384cbff5e29adcb7aad9e40f7b4f736f1","ssdeep":"","tlshash":"5f0175496365e8a85819d6b15213436c7193b304725d1f4a80aca9fd0f12d9578648ab","first_seen":"2026-04-28T13:26:37.514492Z","last_seen":"2026-04-28T13:26:37.514492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/NaPecZTIAOhVxoMyOr9n_E7fdMPmDQ.woff2","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /NaPecZTIAOhVxoMyOr9n_E7fdMPmDQ.woff2 HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://mayanswap.com/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 12344\r\ncf-cache-status: MISS\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1012a157f257003d356e8822032a98fd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5eBYEuPgjJCDGjM%2BOzTeZt1Gxq1Hkg9cdzWP39gJ4P90ZWRnJ9ZosgWkBzPVAppMTonfR0V5basqGikwuOK82lOq0ubRXHOJogv1aHDN4UHCWOc2HbScwqOLh60MFUkq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665ab3949783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12344, version 1.0","md5":"cfb5bec034d29df6c0f56c2c1a0e8340","sha1":"05f51cc85c5fe3b64b2203b363cb48c31f84ce44","sha256":"861b80b49d2a634d8746e2e45c672309d9ba69a2fdd95da2af034d7a1d09b3f9","sha512":"885fbe35410197a048133cebc5e21afda24d4a901fa54923627a0c4124fde39300b235cb1cb7f18779882f57b76380cb1b11477e55ce3e66574eb37f334e6edf","ssdeep":"384:YRKdoBN+5RRu4r3Pjt+Iu82luQVE/26qlNR:YrBQ5Rvr3PjA672/lNR","tlshash":"9242c0764667a3fac442683f2edb19fe897e3215cff65234440aeb9a02d834291dc731","first_seen":"2025-06-03T23:22:11.216712Z","last_seen":"2026-08-09T09:22:55.804516Z","times_seen":6392,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abb962783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abb970783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665abc976783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abc97a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/states.BBGFurJR.css","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /states.BBGFurJR.css HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxVJ2ctdk2Ga%2Bm3G1w6Rp%2FGkguUzj4ls0kLckKccJUKk1%2B13hlW5eixi454AEwhgNd7%2FM0WHl836z%2BK%2Ba6%2FNnc3VvqpAno%2FyUHH%2BNym52410I8sSkmywxJ5uBZLFjtES\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"246ada31397d9e0958a8294f741da912\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665a9b8e5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8075,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8074)","md5":"2114465b6b56036bc08e4e4f93a15e21","sha1":"baea3a34a84c33a3cec6b4d4d51cf82f50717f27","sha256":"6b6e0d2569dbdb135cf7cf04f988ac9ac0a1e2705268d36b6a3097e03a5ccf4e","sha512":"d2d1a378a49db18b6d16f500f7ed53d2ad57da02224763693e4f58c315030c6eb14128c62e0c48b39bd4186f55637cca289f2303f0bc763693644c9982625a37","ssdeep":"96:2+ivmdUIOb+i1eiLKiKQ0iL5iKR0iEI76tHdUIYfxcljOsMOZtmFyKiykmqtXFdr:4H560lsf+ZNggsfMJs4bZNDsfcsf5","tlshash":"5ef1ff20b76c402f3c6780f9f6e8994cd13df1c0fe3667aab785541086cabe65e56e48","first_seen":"2026-04-28T13:26:37.51741Z","last_seen":"2026-04-28T13:26:37.51741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/512f906022996d6c3fd72c4fc6653511a500265c.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /512f906022996d6c3fd72c4fc6653511a500265c.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2376\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ada849c04ac1b5860f375ce3bfa73642\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=491g3jU5eZxJn6JzCW47DOifZS74m18P%2BcIZ1LUdnn0Kw%2F7weBBlQeUmzdwOMC1nd5dRUEId2EuyhOac0%2BVfSNtfxOxhQdIPgyupaGznJAfE3gDpBvzV9r%2FjQ%2FYYxxPs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced","md5":"b1c39d7930e9e324f0358289dc239695","sha1":"512f906022996d6c3fd72c4fc6653511a500265c","sha256":"b47e679c89f6bea6338984c55a7dab36b2d6c9842f50dca162b7b324431d8d8d","sha512":"71c0c17a78d8c7781cafc4b9cecd5180a101c6f498fa92ee7520b4ed43b8cc6d2f196000423f3ae6428ac68622e93e53ecb71422367f8305ec754cedd8ad1124","ssdeep":"","tlshash":"8b413d67f53923b044bab05b99d6da4df03d0f0855dc06a8e5b5c53e64d75405a6c342","first_seen":"2026-04-28T13:26:37.519089Z","last_seen":"2026-04-28T13:26:37.519089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/Carl.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /Carl.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1102\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f7fdc9ca2df1c2a7cc6577532a2d83d6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vq9%2BKh1zXz2uQKC1smZ3q5YGA%2FHfIa21jNld0EJPtIfzTpBHNreOwb1i1y1X0uwIl7OZHFd5S%2Bju5PpF55J2H9gSR2tNFjC6dxtqeazrCvC2GG9umUWCKg9c1NHxDe1y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d90b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 384 x 384, 8-bit colormap, non-interlaced","md5":"ae0e4a2cbed3536a1ec411fcf133c838","sha1":"847566ceec12b05c17ee3f22574631f7b7458609","sha256":"7b69e0ac1d507bf86cb634c719e5cd3d46a94e106ebdb5cc68b64ecee8575983","sha512":"47b15bcb1f47d6e51e038fa7be40ae5a8e34631de39b96cd2ebbb1942ac33f2909bc8a33b7e9fa0d19fd0e03d1a7f19df982a16b859f2d4b3a0823bc06abc58c","ssdeep":"","tlshash":"3b111084cf2244128a0bea30af25cdf49014e6f599c8582e19ef70af60d41838dff21f","first_seen":"2026-04-28T13:26:37.521517Z","last_seen":"2026-04-28T13:26:37.521517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/Arjun.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /Arjun.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28702\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f73ceeccac31a5f76098fe577e0dc82b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ek6bpP%2BVEFxgFpwTmivpTyPT28ksOjduOd7P3HCco9XPL%2FkM4YxVDc2JOjta3VpxzmnkdbK04RlnAE5qGKvWnJ8c%2FNCjIe03xL10k%2FsqeOGmIH%2FWmGnRxi9oKQkhMHGX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c904783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28702,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"c336ca5adf4850cd918e9af59322d42f","sha1":"cd4e5b8d8894474b00d4dcf7141011dc7f2bcc30","sha256":"4a5a38a7cba3f9b9f6c2b25ffc55dd7d7146d849e5e8b450ad928fa7c8e73587","sha512":"8345f7412ca9c0c90598e71e2e06da92dcc2072fa965487965417790355a7562c4d1fb6bafc986bb968a731e56d08f075e27efd9da7d21e199593ead78a63565","ssdeep":"768:xWm25wDudxHjMXV/y3ElxemHqPKnguCEtTJ:AVUQxHaVK3+xemHqS5C0TJ","tlshash":"46d2e118fdd1353dec582fb072981babf9318a2ca74613bc1dc9970597e416309a47af","first_seen":"2026-04-28T13:26:37.523032Z","last_seen":"2026-04-28T13:26:37.523032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T13:26:09.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 13:26:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sEwMzh5YynIehDelBb27xYUxWpnTsc50LVErPbrS8gGmrJeEQ2VjPo14KNuFij4ImxrtwPTUnunPFVroM8hq%2BYb4QMUJDps4j8LVWvf5O5IhaZ0amFd9KkL9dBpaSY%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f3665a6ed26b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114820,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10515), with CRLF line terminators","md5":"3a91780e3edba4fe6220ce41b6730a46","sha1":"b3d6db315db3e831249238c06f460b8cc4e487be","sha256":"e615efb79af0019dc816914f2b464470fce1b8a0c4a162228cd5f26765d31c7d","sha512":"d6b3b073e91cf025ee8527e3c6e23048ba4783246dad0b1a4e177a323af48dcc521b21d92eaa6c445d4b2703a6b978bc98cb9b3f3cc9f116be2e78b179296949","ssdeep":"1536:PTqTJhpXcbRWo+rIOn1ejWa607xGEsQgW0fkvT84KOil9q8c8Jh7j7vzoC7nD:PTqV5MOasGo5D","tlshash":"67b30bf0b29c71ba9007c3fde972529575ce24fafd268a84b3f8596277a4c1c091d887","first_seen":"2026-04-28T13:26:37.524517Z","last_seen":"2026-04-28T13:26:37.524517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":75,"dns":61,"connect":1,"send":0,"wait":250,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abc97f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/_app/immutable/entry/app.BswKx7js.js","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /_app/immutable/entry/app.BswKx7js.js HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nlast-modified: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7UT4wG9ZL5MzQdtbj33lsSweZ9DFfUK1Mm%2BEcWPMvpI4jkFkIPnOTZYN6DLj6xNLRGcDwl%2ByX%2FnPn%2BBe2uFJHopfNWzfyzPnL0PMeRJNG7aIhqw88yNtgrzCztIkhAf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9f3665aae935783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T10:49:09.033131Z","times_seen":17797862,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abc979783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/dfef6b497b2a8aeab5dadb464d350298ed18081b.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /dfef6b497b2a8aeab5dadb464d350298ed18081b.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1825\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3a25c9f1caeb9e11f2ed57197354847f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHog5EtznpJ9XMGGxZ6K4rffGtkybE0EHrkA6s44LnmEL3cyGKCpP1H1elq62Upbl%2Fzz6Afs%2B6rutw5Vta9mxdIegZ0z8EOtb0Ib233kOTCJc1yjlacKx6p0fIlwRvDw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9b8e9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 35, 8-bit/color RGBA, non-interlaced","md5":"fe847dcadf32be7332770560ca9a4c31","sha1":"dfef6b497b2a8aeab5dadb464d350298ed18081b","sha256":"f76106bb5b90d6bb08b38d12697fc0db2c7ef1cec01a02c1f4ff6fc1d340c908","sha512":"ce211de00e8fbde26983663549e24e927d0fb90e49052137d0cd590835361913e27ba4f35c7551d44bbd11b7089f38d2aa81ea543bc67fac0888511f721bf5ed","ssdeep":"","tlshash":"ed31d7b5f80c85246daaa97902ee4a41983b28678a8e72990f3f34410748df1c398b97","first_seen":"2026-04-28T13:26:37.527335Z","last_seen":"2026-04-28T13:26:37.527335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/b5b8db052186ee6b9d6fef2bc22ff544afd9da19.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /b5b8db052186ee6b9d6fef2bc22ff544afd9da19.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1941\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1b4c6adb68ad387a8046e1aeb5f874b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNZKw4jD3O6C3U4oldsLaE2xMVZgD5XvqyYmrXbAnTtWosHdpymWVD9IIigpK1AEgdcnFkY%2FDhUJsMMg1kNMIbKPSESFxjSu%2F3hh5Nt1FD%2B4Lsf75ccohdIseLgRUehp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8fe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 36, 8-bit/color RGBA, non-interlaced","md5":"0ff1eebfeb2466aeb674114d6c5d7e7a","sha1":"b5b8db052186ee6b9d6fef2bc22ff544afd9da19","sha256":"2565272884845d51a190aea201fdb601dee6bf93b6868d1ed33acd421f42cd2a","sha512":"d669134daf7738a04d8f11a49d7a07493c2bfacb85cf5c8c10ef6e1f6bd9159ea592bee79d6faff33e3f6d14d9d0dad87d2a4be4b4aea4b247be6e892e8ad231","ssdeep":"","tlshash":"92413bd5fbb3d5fa426165908b55563c526108289763a0367000dc68e15ca0c96f14cf","first_seen":"2026-04-28T13:26:37.52882Z","last_seen":"2026-04-28T13:26:37.52882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/Widget.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /Widget.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 39564\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0bf7fb94aab9634cef3d1a2826879493\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FIPObn%2BqQyk8%2BqfHP879HHg8GkitQhCM8g5gh6XRqB6ITMzdg3a53eLtKP7jzYMAtLwbtd85FetLhF3IfkzM%2FxzrUHre9wt2OLbKa2lKP7o%2FQ3toNiwA2YXoS15EgVM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d90f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39564,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 496 x 633, 8-bit/color RGBA, non-interlaced","md5":"7b236ea2f710edd090a9796d09f9f199","sha1":"a1ec64ee673d9af7219927326efc268a6a965c1a","sha256":"5ab142a3d7876754691a89df1d8cfabb2d4acc3e3b38da8a0f30d24f91735a57","sha512":"d0b3303b18c1aedc2dced897c505ed9921e688fc2ace7d82a374f2e3457b3389a19d2b9bb180205505f7d7b4944a152f7f4cde7a7258081815d625771be529bc","ssdeep":"768:9PuCJ6WMrVNJHtQhN029cE4eJeHewDTRnens8Oiz+UqzDjEHqc+Dv:voZrVLtx2yEDsvTRnes3y+3zPEHq","tlshash":"d203cf00f9532905a75b92aaed250e38ef18943612e21b5fe3107a9bd5bdd04bf0adf1","first_seen":"2026-04-28T13:26:37.53031Z","last_seen":"2026-04-28T13:26:37.53031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/fba8e37e44dfbcd70aca439717092dd5b4f4d291.svg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /fba8e37e44dfbcd70aca439717092dd5b4f4d291.svg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqeJCSdQ9l%2BZWjC9EZBZUgpb5M3eq0jivGGXeYcmFgCtcggmc1jwEvYjQQFn1RqEvr7ixrv5qTT8BEnpXkjPgSR%2BtGbUqVlv11fKQxaEEPAjZqEDX3mVs%2FePTgMI5e87\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e190c44e278a1bf3e2a4dd3268cd9f91\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665ab1941783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3dea2b0590071da9373c3469e89358d","sha1":"fba8e37e44dfbcd70aca439717092dd5b4f4d291","sha256":"074ea3578027cdabb5aabc5f13f32ceeae649a121bdead13ed83851c83c58116","sha512":"640bd6bddc78267a565845e609370e009810d7c41426762d5e5553eade6d180d3f11aa76892c18cdca558eb41fe8731231fa8979c4283facf2a6bc800692bcab","ssdeep":"","tlshash":"f3015224811ca938d7200f5d7668e8e9f028588b4f5c3164dd4419bab7148d97c367a8","first_seen":"2026-04-28T13:26:37.5321Z","last_seen":"2026-04-28T13:26:37.5321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/28bcc90d782b0b9e058bcd5311a4df6193d52d5f.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /28bcc90d782b0b9e058bcd5311a4df6193d52d5f.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1445\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6c2738f0c523989e88538ff746c2ab45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDXE2UANySnx0T7PW0IL7MstoBuxB2wzd4IzMI9QmSfkdDUqRzMp0TfLB6KU7ImWBBC3Zu5JVuFW0JDiUTz2rC57unvfCLEtuwSHMsvI8sHSypNstrQTWPlBrTw7JuR2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 166 x 25, 8-bit/color RGBA, non-interlaced","md5":"bc04339451a5a23e4a6618bb952cc7f4","sha1":"28bcc90d782b0b9e058bcd5311a4df6193d52d5f","sha256":"32768471a5a2e8541fb7d8d0bc14fae289eaed1a5a8551a6894ab065c62f4fcf","sha512":"89cce57369820cab74bff4cf73f8f665335f41b957b4ac583dc0d65440d19a044482376863fe907e790a5b55752a004f8be917cb2b05fdfb90308799e4e158c6","ssdeep":"","tlshash":"17311bcd5a45e608cb0814cc3c610eb182181b7805eaa1ce2b6cf4cdd8d2b41b49d70f","first_seen":"2026-04-28T13:26:37.53374Z","last_seen":"2026-04-28T13:26:37.53374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/_app/immutable/entry/start.BEyPBVmJ.js","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /_app/immutable/entry/start.BEyPBVmJ.js HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nlast-modified: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8k4CCS3yxQA3AB0%2FokojNca6HVCljIhPbbcj9NGgByx7DkzsMPqjAxvrUpPjihV4JehGj4tM9V0wyItc2YzX%2BGk8LYw9gWAG%2BmYTYVUn4HJRXS9LHkpBN1tgFT33u04\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9f3665aae934783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T10:49:09.033131Z","times_seen":17797862,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/favicon.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1314\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ddf2572d58fcfa2db714aa999324af46\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LQOxLZAqsAvCYtEhqKwcn7JBySsZ71krHjTauSw3MSd3T7kAwvJBqZHmGoA8AUQKxZZu5uUGi8kMqgXMPaCfBSS8F2fFhsgpSZUSHTJjR7ayjqgZ7J2NBHnVz3pxTDH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9f3665ad09bc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced","md5":"8d305d40ef15f878ec5f1f8b859454b5","sha1":"df424c9e2beb725e6bf4cc293e1a76dac5b5b693","sha256":"a1b43f170b873eb45f86868150ecb510e30f7045100daf09b0e0d83f218ae1d5","sha512":"1c73abf327d13a5bc54fdfe67c6aaffda942f87011f6286737b743bed8434dc54534506dbe0a6e38f9660d4b14ec02bb6c0be2ab3f23e1af59388e1ad977e27b","ssdeep":"","tlshash":"7d21efec573dcda0a82f021e67352df187b2c4f6c62f89c09a51b1987c04f6800e49c7","first_seen":"2026-04-28T13:26:37.535459Z","last_seen":"2026-04-28T13:26:37.535459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/Treza.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /Treza.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 22728\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"033f4dbdd4f6a5e184e69a2318c6fe96\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxu%2BdoFwdwnhNdVgriZwfZjXq5nKujCd6gtks7sFJXc2zmHQAkBX6bB4Pp7XAy5d98MVr71418DC1%2BwIJRheJaaSP3c03Cha4dyeemKBPSVce12nfaxuaAQPpaqIby%2B9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d905783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8e29abb53530dd335a7ca0aad083b9e0","sha1":"d519f384076053453879d88c2a87003bc7b84da1","sha256":"ebfb924e3e820f6a905f8b0c6dc5694f4e8b739320a1eef5c52ed3ad2dfc045e","sha512":"cbe72c9ee22b944babef7a9f5790333588ea80652c293d7896a7378be53293084b581c2f614aa6246995ebfcd9fea6b646c13d79cf01797978a87a089251644a","ssdeep":"384:snhG1HAwzCPysYKrtkRLv5eGrIBnC7X6KabEWkKlsn3KKxmdmu0fpgwaGNEgVEQg:44BudprtkRLheGrIBCA9kys1u0y7+/qt","tlshash":"74a2dfcb53e12852e18d8d3b40a9a3b629b52ab05f99d2ef669051073f08109f5d6fb8","first_seen":"2026-04-28T13:26:37.536981Z","last_seen":"2026-04-28T13:26:37.536981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/fcda709e3f043735bec9bd70a52ea51adf4381f5.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /fcda709e3f043735bec9bd70a52ea51adf4381f5.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2668\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d2a5d4d54829376cfd99bdce0c81f169\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRYVRivxtrV1oVZAMIqyxP2xI2G%2FzzYSgmaEBUUqVw1jm2aWxNqDyFdJe3Mxm35wkYp9i5fP8lI1mdaVzgNKzjFKhTUoGh5aSQAU8Y6T2w9Hqvn%2BviZddf%2FpZgQiCXEu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 38, 8-bit/color RGBA, non-interlaced","md5":"27d34e187947459ca5b760dad5afa67e","sha1":"fcda709e3f043735bec9bd70a52ea51adf4381f5","sha256":"9d6fda093b2b3b29312ff0ffb533651de2a8c9b01b8ec832fccd79e2a8b6cf0c","sha512":"e3dc653df6db92b65ccc354409a7533d0a884999fef073e9cc08ba7e3383a8cfc04afbf5265b560e628c89cae30838f5dcb574c8a2b207c4008f2dd0810feddd","ssdeep":"","tlshash":"16515e77cab90ab710bf59201e439036c97f1c48115c75ad5f10ba3ce76446bcfa6876","first_seen":"2026-04-28T13:26:37.538541Z","last_seen":"2026-04-28T13:26:37.538541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/aftermath_g.r9ad7FnB.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /aftermath_g.r9ad7FnB.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6187\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f6fd91a1ccc986865091c5101d930c21\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3mWa4MeNsvZjAdJ5F8gI3sFGmQtX4VQCF2hVIvnmNRx2vZlqGFMJOOfdxKhZhZ%2FfbO6B1%2Bak95VGA99UALGtnqGzulhIUM7qUkSkS71ozIX1WeaIvX3r%2BWUeYRkn8Fl9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9b8ea783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 55, 8-bit/color RGBA, non-interlaced","md5":"09f3760419bbbf769824ed3eb6f3827a","sha1":"c76fae3dcc6a6262d1295added67f5075ee52980","sha256":"a36238a36d9d7f86b29f7e9a5b5bb7e664718bee7d850aa127f33d6b2179ae98","sha512":"92c153e0d4dc08093c59a506e1344e642de09d2df25fff5e73b281ab24eaba2dc39be72f71a9557dcf1560f51995c579bb063bf8c899d7ae534a6728bff949ea","ssdeep":"192:RSpEWUHqoruun1Jz4dSxmdbOdZJ7RQC0l4n:4ewxun1d4d6mdqnnQh4n","tlshash":"79d18d3474571cdea83f33f45e052992da5697c18132ea5ce39339ade2ac089fb508f9","first_seen":"2026-04-28T13:26:37.540403Z","last_seen":"2026-04-28T13:26:37.540403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/16e3009dd7ce86770417a27464d69677c4e292c1.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /16e3009dd7ce86770417a27464d69677c4e292c1.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 891\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7974f0f5671b0bff1087be74d183eb50\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2Fd99wW2VkD30GToj%2B%2FK2IF9swdNS4exNkP4BP7FkvvEy0vuVQx1wx%2Bp5IDL8JZeR9j09vE1Hi7JPEUhY1VIEwG5VMo%2FBqw9CRLkog8mPMbwr7AOf7ZiSyT6sA%2BrUzmJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 149 x 32, 8-bit/color RGBA, non-interlaced","md5":"e76440c6976170de1b606d33114b8d34","sha1":"16e3009dd7ce86770417a27464d69677c4e292c1","sha256":"e913a18c1453c25d24e6b6bb78e99e068c29d288508b9e9200c018273a9eaff3","sha512":"729f37590d6b60280bc551472495a249ce68b38a98a84585b4a5ab6d8c0cda92badc886de76cbe90afb5529101063217e1c094713536b4af38cf42ad2297d77b","ssdeep":"","tlshash":"b4119b5f7146f8fd88684d1f61244b45318f119b19a63c6c487fbc1b153f481b4497b4","first_seen":"2026-04-28T13:26:37.542187Z","last_seen":"2026-04-28T13:26:37.542187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/rango_g.C1tXmHsU.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /rango_g.C1tXmHsU.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5628\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"22f50ed45b85d7d2011496541a32124f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvF38ChRTd9G9U6vc1PBY1Rjlq0n3GPJirVIqpnYwIN1Lr7Px%2B%2B1DvfixlLT3X0FcC2QqbKWJakxRqNKy%2FV8auGBgoNaZy9KT4DGmfUQUO4k1%2F89oMKm%2BrTbdECrbU2i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8fb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 125 x 46, 8-bit/color RGBA, non-interlaced","md5":"f2fbf794a3503a3622dbed72ebd9d2c0","sha1":"f668b1925909d341377d22cf6163958a3fbb14a5","sha256":"c49a436ea7ed7eae93d392829bacf72cc86d0fdcdefc8aa533799b0f7ad5fffa","sha512":"f73969f27664d58aef244b4f5ded0368faf37da09daf1f62ab7556d908c9a0866ae9b1757d30dfa87d399f553cfde759526a173745f78fd4d9d012044da135ff","ssdeep":"96:zSmyDmkartTQiJKCHKjwHmZNSNti6MIx84CO2M2UHAUlOwi6LOEG8Cn1SLjy5hjl:zSbDmxsiJBHKjwGCtxMIy4CO1At6LTng","tlshash":"f0c18cd60de1d41c13b302617c0840a3b1088fb55656fa2e0e229716aadcfb6f4456db","first_seen":"2026-04-28T13:26:37.551737Z","last_seen":"2026-04-28T13:26:37.551737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/aeabb2b2944dcf37356fb412e82a2d4eb6d60b3a.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /aeabb2b2944dcf37356fb412e82a2d4eb6d60b3a.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1602\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4db987b06bee55b13aa6be16b43bed32\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtjebBm32o6spfe2j30aPTYWTt1fChCkNKcOZInEI62WhzaZGyRj1JJjwfTQn6l447F7V8r1BYxOb542uBuS%2FSQuxMwOniZPE6isDqVI0EmmKwx%2BFhFtf3LIboL4SMuW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8fd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 48, 8-bit/color RGBA, non-interlaced","md5":"179635fbda4f77ee81b8c37a6a997397","sha1":"aeabb2b2944dcf37356fb412e82a2d4eb6d60b3a","sha256":"85999e832c73f7e296e6b162307cb14ff925a55e226ce5b279a554c2ca2bcb8b","sha512":"7aad068e2d93fc554eb717a0daa59815e4d45b0988e15a8f82fcea9438f82e95e1a55161a1df2108849b0189b242ec9510a39ac17a495b815dc873327a50c24f","ssdeep":"","tlshash":"d0310afad0b974be42da50075ec74a0f828b3f39003dd675ddea0203526156c0882ada","first_seen":"2026-04-28T13:26:37.553684Z","last_seen":"2026-04-28T13:26:37.553684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/AriAstra.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /AriAstra.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 106584\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6a7e25aab9cacc1059fbdc04b1074583\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJZ7Jgoi09XvN2wiiwl%2Bp1gcVeA4mpCTZq7U3tXRv8j7Wug6786Sj9Vm%2FEyizt1mz0C1cGj0CO%2BC0CGZ7h7VJU6kD9iZaRG%2Fr48y9JXGPO%2BQ80gRDEAAo6%2BTjbM4OHFy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d90a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"e30b3a7a38d0a005246d2104438fe007","sha1":"06d0aff038c9dfa36c800791054e55d9181b4686","sha256":"b317fb95aa25b9d79c8f55eb2e1b7ac4c14e49e13248b48ed1a91c1d0f3e6194","sha512":"a15d2bdfc350992356e93f2a251684f4b5f3288feac669f11ea08581faed08823ec1afb1b5c0b5fc7111544f1079da51434eb80347196c7fa1721416b3b87046","ssdeep":"3072:n+HH/lh+EXkO/Mo15L4knEY79OBLGHO1Z:n+H9IEUOfLRwB9P","tlshash":"6ca312c190869209b53b8c8ec5fb767782d8be0563a52dac4b4d2b251339cf532e7387","first_seen":"2026-04-28T13:26:37.555647Z","last_seen":"2026-04-28T13:26:37.555647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/0.CIOi30vR.css","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /0.CIOi30vR.css HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILayx7%2Be1afvNWF7J8pdhgkEt1hwhcguhzlPl8%2FmaF0Bcxy3TnBdo%2FjZhaYWCseReJc0IzzYXfK9VN3r50DSH1g4wGBowbL0eC725Uq8NVuoUAifLKjXfj4l36VTWIYL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3d48d4b4e285ad29208ecc0941bc07d7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665a9b8e6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15627,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15626)","md5":"83ebd28c9863438668230a88cb3352df","sha1":"0dc9a1838de5a2c5e45b32ddf80c4021b4552047","sha256":"e89079ae04a88d5a3d8de63fd18b4afb16e61dd9349cd862a7f75fe40afe2b1a","sha512":"8100e03a70b44761881bfca70b144346ca90fadcc396bcaa1751010cafcb819ed24fc609afd783b72aecc9d2da012820b69eb04bd2c4a2b79ffcb48e3aba54bb","ssdeep":"192:O9JyW9JyydwOh2bdVsfWhSGzn4NCLHJieZNKvrlJnvWLaPigQXiaqqrds:CwkMjhShNveZNKvrH36lS9","tlshash":"c562b72f7b14205d6c6780f7e4e0b74df229b0c1df2a56eefa435500abc63a61e9260d","first_seen":"2026-04-28T13:26:37.559177Z","last_seen":"2026-04-28T13:26:37.559177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/SpiderCrypto.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /SpiderCrypto.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 34464\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ea0bd830c495c7c06b23f9e38816155c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FileTPHUA%2BnaMQnhCpdIediRS10u6WY%2F9BwfxfaaHTrhhEinemdzzQW6kmcD1sH7iQnezVYYz0c5bXofsik0nLy5UvGL0raAWj4l%2BgCIrs8VJQiFBpRaonVi4kfzAyR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d90c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 399x399, components 3","md5":"b1df49c0be13dff1fcbd7300149af696","sha1":"175dcda8afef33971bed78e9973b95238d098dc5","sha256":"378b3d874a12499a0d7f9736c5b3fd327ccaf1e611e0d7235dd4932f1e008dbd","sha512":"11819f453dfdb9f1367395cc69c92339bbe589ce7faf80f3b427957301ff1ce0046d68ff7d91540dbc61f31334b28854d1015591543ad21129591b89145a4c9a","ssdeep":"768:iYOUPLnhJ743V7b/zny7zse1QrG5udXeQ3IBrDZKu90Z5jDysYDir27:i5Uznhyl//7ioe1QrcD5VsYDii7","tlshash":"c4f2e0513f4d83d0e2aa293de0dc871ad6ea82a0169fcdcf693104fd237c69845b9cd9","first_seen":"2026-04-28T13:26:37.561584Z","last_seen":"2026-04-28T13:26:37.561584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/cb0fb0e54d136410e18c6baca2aeddd187768d08.svg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /cb0fb0e54d136410e18c6baca2aeddd187768d08.svg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyBiVeq9Lrxs5h7j86ZyVO1X6PhDQHQ3lZ3mIDlJmK8j144M9Sh8Grmv%2F2xhklTg1RSJiNXNce0A24iVsnu1XmDEX5FQpOqT9GpZsvUh7rLi2WPfE5CNt0golM0%2Bgne0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d46a94a7b66e649689ef295ac8f9b1f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665ab1942783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfcc4225f09ed0a1a4d621e3cb790b86","sha1":"cb0fb0e54d136410e18c6baca2aeddd187768d08","sha256":"6bf54bf23fe43e6125aa7bfbae161b6009ce7cc7a3c369668eaf78de13a84ea8","sha512":"2d4db3a6865b54e64a35360a9e7337ace6904044640227f28a379a6e9defc654cc6d9d49ac26c912720614ffe79719082da5c30edf3af375d5fe4c3dc01eb580","ssdeep":"","tlshash":"c5213224811caa38e7600f5d7668e8f9f018588b4f5c3164dd4519bfb3148d97c3a7a8","first_seen":"2026-04-28T13:26:37.563042Z","last_seen":"2026-04-28T13:26:37.563042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://mayanswap.com/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 22288\r\ncf-cache-status: MISS\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0e6839a8cc32f08b8117248532435ea3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3bKN%2B25AQr8RAFTMwm%2B3ZuUSaaop1iJc4pZbPcVdfqoY529oYRq9I2qQGGgQElp2LBaPMI3qKSzZ1%2BSmozJttCwJRxPb2KMKD%2FR6XaKx0Yp44DrjprfwECA1h1q8Fc9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665ab2945783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-09T10:49:26.913353Z","times_seen":26951,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abb972783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/NaPecZTIAOhVxoMyOr9n_E7fdM3mDbRS.woff2","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /NaPecZTIAOhVxoMyOr9n_E7fdM3mDbRS.woff2 HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://mayanswap.com/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6820\r\ncf-cache-status: MISS\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b064df5f689b6518dc88050a9f1d4b04\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjxO7eOcCs1mLOt3pgKL9WPX%2BIjNqr%2FWXQU8NM6HOS5Dpy%2FZof%2FU0%2BHVTW8lWEZCzbj1RJhlELPoZFxjTZLRt3sR3dDAA9%2Bqp89y%2FGC5gvbQx%2F%2BNkFHTxkhhHMH%2B2qP9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665abf991783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6820, version 1.0","md5":"0180cb3f1ae237fcc059f6730a3cd63d","sha1":"20bfa9cecf4db5ea4ef45c95e562e17caabf278c","sha256":"ecd15a1dce7380c9d4af38ee3dc9bcc4fcd53101040d88abd7ea98968938120c","sha512":"71840558f94086113782b3b47087b8a8d1ff588783883f4ce23a4b72a3c778671b7c51eecc78f5bf1f9a492762617e77bc06a4b0c2a94645a0cdf1cf0c9a180b","ssdeep":"192:97oC5l1TzmkUX+GamNQwim3ZoM33O/305959Ypw0p4+2nGh8:97oC5HOk1Q+0c3o95apVp4+cGO","tlshash":"6ce19e4ec5074713da38793b103df5d9ca9002572dabe5f1b16ba60621a2d82ac93e0a","first_seen":"2025-06-05T11:25:17.246909Z","last_seen":"2026-08-07T23:05:49.08973Z","times_seen":835,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/ae7f3c7065375358da1cebbf762dab5e0fe5f8e1.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /ae7f3c7065375358da1cebbf762dab5e0fe5f8e1.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1446\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5b71a770497a9c8c2927be5244b2dd74\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jv5OekIKBIVaiNB4Em%2F2YP%2BNjjghQ8IIDXgImCVa1hm%2Bjiw6zRtkHJjc4hsTI%2FJXP4tzj0s3s2bklWThtH7IMmCj2v7cZzXyy%2BrR5MrauK5F6UXgEB6DXM9TacnYVGr5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 33, 8-bit/color RGBA, non-interlaced","md5":"866b1c11777bc702b670ff9d4af71995","sha1":"ae7f3c7065375358da1cebbf762dab5e0fe5f8e1","sha256":"1e19e3db1f8dad02fc840b2d2f6d9c01736867d0af1a60a8d4d979dacd375ff4","sha512":"5e1f68ed66cfd5cdabfd7828039b5222cc231ec729a6fde47320140da13077de6eddfb7d0971c9bc8c9765ae7bf0f8204aa15a9643195a41b164291f6c708914","ssdeep":"","tlshash":"6731e9c896ead9a8555ec120386f3084c09bcab25015e96d08f87c6984c811d058b7c2","first_seen":"2026-04-28T13:26:37.565928Z","last_seen":"2026-04-28T13:26:37.565928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/de93f33fdcf13c772cd467ad01c6f90cabe46816.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /de93f33fdcf13c772cd467ad01c6f90cabe46816.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 495\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9a430521bfa7041c223e53d9e2ec6b23\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4uQa12MOOziVnLDF%2Fd9lxesNwknwG17Jn5CiGZG9HWzZSm%2BZCLwYxT1jvRJ87CiZD%2Fh0hu9p0nGKgHBx%2BzyBrXjAT2mMlbKdvfKTUgsIzy8AFY%2BKjAaLEQ3VM0yVyMl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8f7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 56, 8-bit/color RGBA, non-interlaced","md5":"b41560dd129dee8e59e9edeb3b6f3ec0","sha1":"de93f33fdcf13c772cd467ad01c6f90cabe46816","sha256":"d1649266ea14228b980b8be22578167c2bf740ed0f1854b019310d28202c0491","sha512":"07efbd06a4155a2a780e31977ed2256b92ea185d55a80390b58755820ce3aa152805380fd641e9d3dce5bc82744bd22bc87f3853510d0572c4948551219fc7a3","ssdeep":"","tlshash":"04f005e65704607bc794c2b574f50d4018272a3d041c364dae67386427056d76855679","first_seen":"2026-04-28T13:26:37.567263Z","last_seen":"2026-04-28T13:26:37.567263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/Stephen.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /Stephen.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14444\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"104e23ac3eb92093c7db8fb9f217ce9e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fM1OlZPMdYK6ipqth%2Fghta3MpvM5UcPn%2BdOKF2HztCTfxv5j9KzqL5kWipqiSgl%2FRKgELi7bTgfZDF3MjOdBK8JL3dtXW0mSkjZF9COCxMxvl3BKLoo12ygY%2BtdzOx%2BJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d908783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"394ae66a8c144a1169ce23cd96bc3fd7","sha1":"6377050e54b578f5f46e41d92e3a8104aff6ba89","sha256":"eddee58a4aaab0a65415181997ef5829f9f0d52bdecf97049e55423310f072f0","sha512":"75fc8efc0b259fb8c53f1713abad13f2c4e529aa239ed00efbc6dd0bba67ae783d82971d190386db670663f292f07ed50893e33b673a33791cc8a62330b85ab3","ssdeep":"384:s/J9MhU2UJVW2r7k/hgfNlbWDgoerTVA0LEZzt4howHs:u9+UBvrQ/hHATq0LStcNs","tlshash":"78529d9753131259eaac33bd2be40a16bbac6d3b4dbf5b7411c92432071da438d5f0a7","first_seen":"2026-04-28T13:26:37.56881Z","last_seen":"2026-04-28T13:26:37.56881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/v8c78df7c7c0f484497ecbca7046644da1771523124516.js","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /v8c78df7c7c0f484497ecbca7046644da1771523124516.js HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSqohBBDzwpyVeziWUGVNjCB5qPt7YadxXxH4bNq0tEVuNcEmEf4GIrAWzdXLqgMVJ29T%2BYB%2BNNUpMWGOGU4qLdMIobPDwzeFQC%2FmhIFatn%2BnREIK%2FBELctYxCna8EBz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"03930682cdb8fe27d87d8fd030c9739a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665a9d910783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31172,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-08T13:59:29.124789Z","times_seen":78335,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/gradient-sm.webm","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /gradient-sm.webm HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://mayanswap.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 173092\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-173091/173092\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b7da8d44be0189dad065c190ffe6e356\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3zKGdS%2BoP5ZaJ3spz7bD%2FUHAmVGaoBetfeY5bOfE6M1vZH5p6yCzjXS0by6ElWrqCIzlc5%2BYeq69pfhD7P4gQ%2Bnxn5L3mDAmS5dzk%2FdauBwOKp9B9JE9Om2NLBa%2BqjW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\ncf-ray: 9f3665abb96e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173092,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"eba973ad6d8bcc7f117e716867a0ef7d","sha1":"23914b280aeee041fe96807ba00d56e02a51626f","sha256":"844a74ccfeaa3c8500025611129f3c095bedb8c872d2f44c08c11031ad4feb49","sha512":"73a9c54baf1d1ccd668709d2208bb5e0519ecf8a3b0ca7d97fa320f60b4edc043ac8ca887f6c882c4f90283ea660f00aba259ba6d00eb7e3fdabff4ee34de72f","ssdeep":"3072:Lm9dEwb6AT6i4PpFhYeT0DRum+CQzFksu9NQLc+L+Gw8NEp9UDI:Led5eAUPpTrCP9QzFksYNaciNEp9iI","tlshash":"5d0402ec55b29042d5d522b9fb6b0b5a101f11f941f172bc1dda4c2afa2e1ff8842d2b","first_seen":"2026-04-28T13:26:37.494609Z","last_seen":"2026-04-28T13:26:37.494609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/a6c10aee8312bfb197a987cddb4be03336d04d03.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /a6c10aee8312bfb197a987cddb4be03336d04d03.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2908\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0f64ad1e1b86652bb19e5b1168032472\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1P0rxS%2F9KPzGVjazzGrd0hRMTzvRpe6cdejua8l7%2Fy4%2Bq7T0BCGR6ZLOCm65Xb7f1FAvDRH2peVVulx3ff7TZXUznevaUfp6ykQNTpCKQcZtAb5j8fCA0M6FC7Xnxzzt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c8fa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 68, 8-bit/color RGBA, non-interlaced","md5":"1f4060fa57ddaa66f5312f50a731f110","sha1":"a6c10aee8312bfb197a987cddb4be03336d04d03","sha256":"896287778c5f25343e8f657d222b41e1efbdfdb7e8b01b82cd43016f0b684157","sha512":"d1b699f4a848e7377667f6655563521d10e1f165bc68082107e235299d86f497c3f9c4cd77a81f2776f6e704c581eca714b614d1c57000e16b8ee92e167c909d","ssdeep":"","tlshash":"4c516bf89c4ef0e9c2a6db6e6aff0bf70d2920455ff1642648a5c5ec88400774e18ad1","first_seen":"2026-04-28T13:26:37.571105Z","last_seen":"2026-04-28T13:26:37.571105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/bitfloorsghost.jpg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /bitfloorsghost.jpg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 21495\r\ncf-cache-status: MISS\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d8b5c0cf49af5899f8b61960f594178f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zohqnn1v4xqsU088bErpsneZLD%2By8fqMVgqPFRnGKyuyG0RU%2BdrEnISF8kmEQazteX1ypk%2B9xoKqDKIEWvQ8sncwRVaiZDd3OTk8J3CYaHOaafbIsZwJ9nxVFD7f6RiU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9d909783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 359x359, components 3","md5":"45e13c834ecf33c1630f2e9af70df40e","sha1":"42afcff7094a313f599568284c0d15841dbef3d2","sha256":"e83948a7fdc33985e9e2f06e72085b20792ce40225ba2660f4b073142c4f17e3","sha512":"4aa19737e0f242d4755b314048d07685082fb55c3b4cd3bfabd6392c7cd68190c697085513d25d8fde2233e16d6d882539b8db67ff48006c5af8ea80d2488e14","ssdeep":"384:snpnEm1s9cGKFnIuuULZaa+3QKNjHetBil3Ge0JCQc93TxkXdu/JnvCdbFZW0X7m:+r1uKFIXUdxqjHetxpc5ICJvCd7Wxv","tlshash":"9ba2d1e3322459c3ec1e5a74241fb352fb1be77b42c1790af5d2643a13887895942a7b","first_seen":"2026-04-28T13:26:37.572391Z","last_seen":"2026-04-28T13:26:37.572391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/953a0f50305bcc4858492c8d0eb0afd4c07c49aa.svg","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /953a0f50305bcc4858492c8d0eb0afd4c07c49aa.svg HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lY5pdOowRfxHOf6XVNJKz5kLjeYGA2zdJ7DxYcaQ2ZVVAnsGgvWCaM01O%2F18oUDGyDIytN52b4QCWWUyacdc%2F5YvPwwNJ314RPaMd7o9csEDPRaBl49mSrY2GmjtEy0X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"09f59226c059c35bd67373dbaa1132c0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3665ab193e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":913,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7f2d3a90b9a06d816e6be6693b4e804","sha1":"953a0f50305bcc4858492c8d0eb0afd4c07c49aa","sha256":"0b2271813a36a75c489f7a8ce961c4787bf9c27a0e449d0679393f855b802252","sha512":"72ac02d4da98418013f33a7b74a0dbc885cb236443b8c705ae0fc8c6664939b368529a0b31235368cb4ed7e2e23dc769ed74093a838ba5f885b14219142bd053","ssdeep":"","tlshash":"8a114224811ca638d7200f5c7668e8f9f018588b4f5c3164dd4519beb3148d97c3a7a8","first_seen":"2026-04-28T13:26:37.573874Z","last_seen":"2026-04-28T13:26:37.573874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mayanswap.com/ca0e1f644453d0f853173520bff5c3ebca64ea2f.png","fqdn":"mayanswap.com","domain":"mayanswap.com","tld":"com"},"ip":{"addr":"172.67.168.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mayanswap.com/","date":"2026-04-28T13:26:10.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mayanswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 21:36:57 GMT","end":"Thu, 25 Jun 2026 22:36:55 GMT"},"fingerprint":{"sha1":"A0:D0:54:AA:8D:73:43:93:71:36:FE:87:47:1B:51:86:9D:62:4A:9F","sha256":"FC:33:61:52:04:09:84:87:46:31:33:76:82:36:B5:33:78:DC:FC:86:BB:8B:1F:63:76:BE:68:99:C3:4F:A1:64"}}},"request":{"raw":"GET /ca0e1f644453d0f853173520bff5c3ebca64ea2f.png HTTP/1.1\r\nHost: mayanswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mayanswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1233\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"583d7084c0f92832161559790e216383\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SsaGP2HyPotW7kkvtu1k%2Bz%2Br3ZBqUljSclk7cM2IHcygv3ENiLMi9phnftXY0MskoR8TNFfqDlP9LyUO%2BHcU9RTJgosPLzLqfzXqXy4JcMJH9W1HmyTHfPrrFBzC3MZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 28 Apr 2026 13:26:10 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9f3665a9c903783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 199 x 19, 8-bit/color RGBA, non-interlaced","md5":"a5423be56f37c832052fda2bc34b4e0d","sha1":"ca0e1f644453d0f853173520bff5c3ebca64ea2f","sha256":"37974c94fd616b85e758064b827179869fc42c957b4ddec220a1e84b0f8024d4","sha512":"6059e2dfa6e13719e91eca87906d4e364185e05b1b5abebaa485d453372c2f808e23ad3f094563099eff2684f4895fda9211e4bbcb2582ea1d31ea0a89397ca1","ssdeep":"","tlshash":"5b21e7e5b59de97c8ab9e92c211143b10451b6a44fc2a61f2892e478c0db7ac61d3682","first_seen":"2026-04-28T13:26:37.575324Z","last_seen":"2026-04-28T13:26:37.575324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mayanswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
