{"report_id":"558ae406-0ed9-4f3e-969a-f4af8a165780","version":0,"status":"done","tags":[],"date":"2026-09-09T18:10:55Z","url":{"schema":"https","addr":"matcha-swap.com/","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"matcha-swap.com/","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"title":"Swap tokens and exchange crypto with no fees | Matcha DEX aggregator","dom":{"size":122828,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"987fa0f5f1db41e48ca44e4578075808","sha1":"43952739d6cd3f9dc4b4b72f18464ea108c675d4","sha256":"8250fbee8971dbc70b63f5a93706344c39734f8a5986b93f03c83474e0d53b86","sha512":"30aef34100ff4ffe8b859e526a2b44583d855a5e0492076e237cc51d28adec3eee58a46dd034c76a95aaca3d091d932733cde8910b43b2a15955369dd9a3912a","ssdeep":"1536:TzPebx/c64Jysq7vKcBwyUDNy0FCQfv17ADFtLekVokUrIz:TzeVtx","tlshash":"6ac309b0b154217cb81787a8f610fe94935eb1baff42049de69c14a1f9d7ce2d863e84","dom_hash":"domhashed2bb1381eca41674d05e78a765991a6","first_seen":"2026-09-09T18:11:03.13429Z","last_seen":"2026-09-09T18:11:03.13429Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"matcha-swap.com/","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T18:10:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"matcha-swap.com","ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-04","domain_rank":0,"first_seen":"2026-09-09T18:10:56.999495Z","last_seen":"2026-09-09T18:10:56.999495Z","alert_count":33,"request_count":33,"received_data":2387188,"sent_data":16850,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"matcha.xyz","ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-22","domain_rank":213456,"first_seen":"2019-05-31T04:19:03Z","last_seen":"2025-11-04T19:23:47.544105Z","alert_count":0,"request_count":1,"received_data":521,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"matcha-swap.com/index_1.html","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.313Z","timestamp":1788977426313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_1\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXdfYtX3grJ%2F%2B2ol3SSuiMqKLP0ol5F%2FkR5R5%2BY%2FdvaTnStMe2uLW41M3xDpmC3oK5uWiudljveO10GG2WEVmYUjvNCptDd1igscY6aS07kJNrb%2BBvxWt4sv%2FchmAGkNl%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a38826528bc6a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-10T05:24:33.210864Z","times_seen":18376549,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/favicon.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.628Z","timestamp":1788977426628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stxNAbO%2BUWBQxgMJ2zjnZaUiBkjUqKPGArdhKbTLTMHSo%2BlAFx48H%2BuPYlLnhekdvS9rZc0Stj7TRU%2FiK55nsZyni5aIYPzoVWlUw0ddHzpGpq6AsYEPMrVztziBNaLPpMM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6e5da0b4d0a476e72403655308606466\"\r\ncf-ray: a38826547bf1a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":913,"size_decoded":1154,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14314c1ce6615a3c007dcf31e68658a6","sha1":"ce913e9793ab8b1e9f46a70ffac8f8aabc8cf8c2","sha256":"19be6a314fc2515cc0ff75cc81170c9a6810f0a1e6a1389a9e2908d8c0d7cc19","sha512":"cfeda4afa17996abedbc1855a108121f69b3f1deb532fc176e034c116e0f2aa8d6aad92f6844762febf9a0174f9544cae7db3fc411050e920374ce01c9201f92","ssdeep":"","tlshash":"621100ffb36ca1809205d384e9a4c6156b5e30fc3f1b478a43529945bea03ad943cc30","first_seen":"2025-08-30T01:57:24.099503Z","last_seen":"2026-09-09T18:11:03.137552Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/0x.png","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.649Z","timestamp":1788977426649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /0x.png HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b3456d338af8e9eebed89f9a02721ded\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfps8mrwkSqPlFnftjgMtC6irCmcGSINfkHo12Uh%2BrOgUpPsa3gXZPgceIN3jbyzEPJLTl%2F9VSF%2BS08qWb67bX%2FXcv7kzeAdf2TOsfUrOVk69Onz8C0dBibzH0GneJOfges%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a38826549bfba5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":1364,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"392fc2a2d676c78d2d77d685fa3bca7c","sha1":"d6704aef3f00042cd4fbd5a9d9c8de9ec7b93f5b","sha256":"50fdd7115599d16722b0fb6df68416cc3b0197269cefc8f016c4acd055f207d5","sha512":"0b901edc915e5f1d2818da01758f372d4021a5d2101349c98a0d7f0522c0560862ee2a44ee607aeb2b13b7477fa07802fb0cc70c4858f6b1d43985278a1d6512","ssdeep":"","tlshash":"3a0144e6815be89789f06a62f7530023f6d9612716a4da9f8149c2a1116f211486d39e","first_seen":"2026-09-09T18:11:03.139256Z","last_seen":"2026-09-09T18:11:03.139256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/deep-liquidity.png","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.653Z","timestamp":1788977426653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /deep-liquidity.png HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5c277f8d957c9da775205b1eb0a39fd4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVoM%2F6HQ%2F1itsEQu%2FaxcLgOq42%2FPuV3r8S1Q%2F6hm%2B%2F%2FGLntRDKXuW%2Fts5k%2B3UPH84vJt2BR56eHmSVMmrruG0SzfDBEBuja7GsmfDpQ%2BGcnZJb857GUwVuJU4DuAYm8YONg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3882654abfea5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 637093\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637093,"size_decoded":637770,"mime_type":"image/png","magic":"PNG image data, 1958 x 1097, 8-bit/color RGBA, non-interlaced","md5":"bb4c645cd8e97346e2436f30a9a7be47","sha1":"bf6e0ec5fd80a7846fd40f5b738b2926dfbf3e2e","sha256":"dda7bf3f9c56ea3cfb62b588c9160cf83614c036c7d9afd894dc81e60c9b8fcd","sha512":"fa09c97e65df98ece7e65c432aa2223982e142a29715015fbd3b47c60f9a34837af6dbd6230646e62f30788a9f555415ff247d27fc82343310c0913082541961","ssdeep":"12288:BPaM080ZyUVDyojXNl+qMjkpnTROAz3TACocPGI8qmeUNlFxv4+Cv8:Z2ZwojX3+hYTkITACn8qQNHxA8","tlshash":"88d423cc9ef1af64fdc890734b82a4697b2f205f71d2551ce0a2fa1a1d2b73d141698e","first_seen":"2026-09-09T18:11:03.145827Z","last_seen":"2026-09-09T18:11:03.145827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/InterVariable-DiVDrmQJ.woff2","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://matcha-swap.com/index_2","date":"2026-09-09T18:10:26.705Z","timestamp":1788977426705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /InterVariable-DiVDrmQJ.woff2 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"92600ddba0cd8049ee345c11941cd7d4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aJU4rPWbnnGHO5vwDEs%2F6%2FfxkuRR3HYU7NctpT2qRBPW6jrsLWWwBRmc%2Bh1ARmLzZ9VE55oPmQun2BuH7caV0sGSM0HeXlEaueSWKGH4h9hA6MnhhoJehJy9TnZjZoy3m8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3882654fc09a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 352240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352240,"size_decoded":352919,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 352240, version 4.66","md5":"2bf3d951bf9d6109437ea0874bbf12fb","sha1":"f55b18fdf5a4fbca23e23010fbe89df27d70d1ff","sha256":"693b77d4f32ee9b8bfc995589b5fad5e99adf2832738661f5402f9978429a8e3","sha512":"9c34339e338bc88488195216a834004c3cc2934896df8a5849c26801a88c7a4c4d84563d9cdae449d81bb379549f69f57c5fb9b199826adb8a88c3eb7d22bac1","ssdeep":"6144:NXxnNQ1mzp/C4K2K9y0deanlT3TPkHW644MVz66Z2YS78Eq/H493abRLF/VBoGuB:RxnNXpq4XF0tTPk2jzRkYS8/GabjC+a","tlshash":"fc742337370464501452c3aca8a70a57e6302de69fda07ecc7ae84e8899ca797f1f74d","first_seen":"2024-11-16T09:12:47.72962Z","last_seen":"2026-09-10T05:23:23.870509Z","times_seen":18125,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_3.html","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.315Z","timestamp":1788977426315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_3\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apwxe61rhhrrOqVlIArbdGK1W%2FiN7EOlamZvypJOUZ0KAHhgeQsShx%2BGnLtQ4tHPAWVCnv9ueldmB4W0WKiA7hZh1AdTgI8J07xFXXGQR5p6YnzzwuWyfkL4A%2Bpds7wrH4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a38826528bc8a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-10T05:24:33.210864Z","times_seen":18376549,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/apple-touch-icon.png","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.325Z","timestamp":1788977426325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6a1a88db2dd29b347ad439681105519c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgDy24KJXhkKAHPRLMS1kfYgBtEbBdlMz2pen%2F1wY225%2BqKDxAWnX9LAbolNJ3%2BNAaCnIRWHmLsQ63yYS6YLynimSQfNxOpEEoQFNfxhaY72qAwa%2FOEO%2FY%2FQifnPAi7S4%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a38826529bcea5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9339\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9339,"size_decoded":10006,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"6160ea34809a2a136dc6e45c24e04913","sha1":"af792aab4a7a0e906696f2dfce0f15f500355d35","sha256":"b6c9fd5168cfa09b0f815133b9151440f0e9bbf8d0f74bd998598ac51a0bb586","sha512":"bf6a15c5bb34bdbeafb5151b332eb2b3baaab23046f4c1ef2d153705e44600b93784467be4bf00f91a9dbcf5497ef88c9579f34a6a5bc0320e5dcd7629b99d8b","ssdeep":"192:YdvlCvboQzJaDEOqGK1hR16IiYe2XAbKaZ8VHPssGTCkn+OVMI/e:YdvlQz7t1hRc9xziVHQ+Ol2","tlshash":"db12b0c7ac325adff80c7a4bb7e598c34015886cf32f58a69a5491c75b0b810097e4ce","first_seen":"2025-08-30T01:57:24.037032Z","last_seen":"2026-09-09T18:11:03.158563Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_4","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.365Z","timestamp":1788977426365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_4 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://matcha-swap.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlGug4po%2BoOMCorfxLox0Klm96l0l%2Fq0kqAdx4SSpKnsmLRyXHub7Bxq3F7Z3sPiAB%2FHK9IkIJRZhSOs3a8vdVxkNnxWh9K7X4MyjIiyzJ8IOJgzn3k1%2BMxovjVCxPVnMbQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3882652dbd3a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3157,"size_decoded":2027,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2728)","md5":"39ce0ab7878dfd3b317e5f6b71f2bbb4","sha1":"063495b4fcb68c093fbb2fb00127a68e18cac08e","sha256":"1c419ad802d030eeb50e6853acb83f79ecd292c775a92add188b6bebe32b9186","sha512":"7541a62e1fbfa4b3766f37e912d8c0a27d95bb64998f81e8887cdfa1242399eb352c07add64453c24bf8d58845a20cf659713e41609977a54dc0f2b6eb1ca348","ssdeep":"","tlshash":"9a5185b05252367cb823958aa3dde6784136f153da1a0f2079319537fed36b41853f8a","first_seen":"2026-09-09T18:11:03.163436Z","last_seen":"2026-09-09T18:11:03.163436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/30euf7ozn-qgc.css","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.310Z","timestamp":1788977426310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /30euf7ozn-qgc.css HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpwB3bGAE7hn1UC0opU5zNtuQd1v15NlDoqRoPRXqk87Kf8tgZjM%2B7NSLUaiPknf9IHOFkEG%2FrPJ6iA6vD6ntv8Gfb6xMO2fML9nTAaciHxVCuI6k58OdphOp6Xfls5Vcuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3326d882b185609e1e71f21d9bdb1632\"\r\ncf-ray: a38826527bc3a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270474,"size_decoded":38766,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ec537a460b9503f3e364cbaf36bb876b","sha1":"b6f1158ad4e657652d68831fea19da29df4d87df","sha256":"21f414c7d7450e9cb137585743c2126507d3a2aac5404fc52948f3d7638aa38d","sha512":"ae3a7b799635248b7ea8d4aea0f1c5d7d6ad724e6a04cfa1925333998200b5b0b668239f3c960332c1722aa2561590465cd0929fa881afa224243d6b2dbb597e","ssdeep":"6144:Mh6WgGeuQhB+GDLHew8KDwLXUvxHZGRk9D/gJJhbZMqZuRzgBLY4g/M/ECWigsOJ:Mh8xDG4lxr5yvuSTiHnzpOqL","tlshash":"c94494a4e2159d3b7c27f47f82ace49c92057942ee5637eebb01a1105acbbf20db2115","first_seen":"2026-09-09T18:11:03.166826Z","last_seen":"2026-09-09T18:11:03.166826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_4.html","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.317Z","timestamp":1788977426317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_4\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=248YwBvDLuGzRAHYvG6ooMZeyOewEoJ3vLwu2fDb71oDcWtrHrz0qKkR4%2BqGwaQxnDMVKnZwo6koTks9iVPoV0HF6YwruwJ1luW85C9y95%2FWJgYUs%2BE0hhc2rKGg8%2Bc6%2BpM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a38826528bc9a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-10T05:24:33.210864Z","times_seen":18376549,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/low-cap-background.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.643Z","timestamp":1788977426643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /low-cap-background.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbd1uqlBTqFIJSILSkVW5b2e7IMrbdvy92Nybtwxgcj%2Fhq3J4uWJdQ99pR%2FmKaQKhg%2ByFSv%2BHA1kUIjD%2B5j885ycmtkRIbFK7zejZC1S2w4z1OuOyuu7Ar%2FHfYFpdo808tU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d8c0655446524ef4715836e78a576e03\"\r\ncf-ray: a38826549bf6a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":1367,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7523aa82f3cc8df73b3b301f7ed7c7b0","sha1":"adf439e62fce1d42e937f18809dd15fd62f2285e","sha256":"00ee584fd54eb38f22036121c2c471522f12dd460327b509ef82270ff4f6ed95","sha512":"08d5e88793e1f65b8d84aa1b230aab9bb5f22df17c2d9d3e8f5162d6ebd61d23fb9e41630cd3448dbe697b5702e99ff7676c6ff29fc728537ced40f57f7e994a","ssdeep":"","tlshash":"ce2132fdd30d743bdb51478cda469460545cb3e9e386402ad6d0275f185cde5281d3cd","first_seen":"2026-09-09T18:11:03.171326Z","last_seen":"2026-09-09T18:11:03.171326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/ring-lines.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.645Z","timestamp":1788977426645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /ring-lines.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZSfdMs4hVWvX4wUrEYMuwlaCb8LcEE8TIy3pfFk8aDQlDGvn5a%2BJKtsZsec7tm0H0d72K0aRIrugi0UoHyVFTsAvR3l%2FifY8YUOqx1sbISD7snFpOQSM8cz%2BvMvwV2ka80%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3bb64d02347fefa41b7e738a1d3fb827\"\r\ncf-ray: a38826549bf7a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2321,"size_decoded":1643,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67921017e4cb4ecd67b639dd9f3e9ae8","sha1":"eba147f484002516959d0a45aabb1d54e2fd0e4c","sha256":"c2b7be4737204869e218df0de016b0648d40731b3b7ec0dbfa1275bbeed822a5","sha512":"34f5395ba99066f1e762d9049dfbc76cf3e2fe5d7b84737bfba8514b54fdd49ed3b125226d7b503ba660ec43585e10fa17e31a6cfb5f5b9049f67a65edd51eff","ssdeep":"","tlshash":"8e4120ad57381de9d7c792e8bf43651b090483bb9c98c214c32a6f05740848d7e519d3","first_seen":"2026-09-09T18:11:03.174201Z","last_seen":"2026-09-09T18:11:03.174201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/routes.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.651Z","timestamp":1788977426651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /routes.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gMu8D9eH%2B2SbHt4EeP6WpGCqakdOV3hGd%2BiFw3F3UPxShzL0PuogCcrGohvT5yzsbK8bxUtOx9EyaALZhzgLp%2F2Lju39YVolLQMbjD1wPZwLQXuzQtlsU%2B%2FAFsdG6gEilI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7ef2a84afe1341c68befc23a69bb56eb\"\r\ncf-ray: a38826549bfda5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17907,"size_decoded":5749,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b48c914f5d5c8c1bfba0773bbf9bf7ab","sha1":"2c43568c91e1ab4ab3af8439186b3c74f0a695db","sha256":"531fd249a241a77263685e1a13c68eacc86d222c50e84bc4cfd6e982f3fede04","sha512":"940038fcfeb9ac1ba4bdbc47ec0d9a0d6d36a53177ff3780c2e8ed812cce75cd4e801f6ec91506242bca30f3ef25c9c10e3a33fe92b8c790150012a690ac9ab1","ssdeep":"192:iTbDvA4J4z4/zDC2Tp1kIPjBNqusp8U193/qXqaR61:4bDA4J4yDCck4jBeDz/yrQ1","tlshash":"e982e1ec2734cde0ac4a13b5df282de575712caa6b910054fa6c24602f5613dee4fee6","first_seen":"2026-09-09T18:11:03.180482Z","last_seen":"2026-09-09T18:11:03.180482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_5.html","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/index_3","date":"2026-09-09T18:10:26.669Z","timestamp":1788977426669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_5.html HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/index_3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_5\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdbihv5ibpJ%2Bxy93fF%2BeCcOF38x2xUDtiMYK7mErKkVIATf3%2FtTPA%2F1AiYUviem%2Flrx6xY01axZDdxUz9yFLaxilOZKD5GJYZWH6%2Fs1SQR%2BTquDTlVXcViKqpiHqLZcf9mA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a3882654bc01a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-10T05:24:33.210864Z","times_seen":18376549,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T18:10:25.872Z","timestamp":1788977425872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JdYOkag7QypOsaXSP4bF20XzuBYy2Kd1sGaynj0UvmaO8G1DBG%2FGAVryJ6WTSyY3oSbVozrHlmCDQenKho7ALBi8%2FG%2BkidYH%2ByeAaeHvo8c3wAhhpFbe2R9CM3mZkqlOjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a38826501b90a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122843,"size_decoded":26328,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"122c34d502fee1af3fc2bfad7fd61972","sha1":"c20343ca9fd715fd5855dfc95db0cbab2d447383","sha256":"6904609ebd9d5d397ac51e7df0afd1d9b68ee3ac0c51799081664cbe2d004bfe","sha512":"a9f267d5f6cf7df1d33b3b5bb5dc40333fb3244909cc2e10e0067595408ff71b3c8fa2cfd7df7034b60fef182d55d2aaf938948481f0f81cf15312f32b4fb6fa","ssdeep":"1536:/zPebx/c64Jysq7vKcBwyUDNy0FCQfv17ADFtLekVokUrIp:/zeVt/","tlshash":"29c309b0b154217cb81787a8f610fe94935eb1baff42049de69c14a1f9d7ce2d863e84","first_seen":"2026-09-09T18:11:03.183492Z","last_seen":"2026-09-09T18:11:03.183492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":20,"connect":31,"send":0,"wait":179,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_1","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.357Z","timestamp":1788977426357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_1 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://matcha-swap.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=laB2A8jsvvBNvXpmo7PenMSP7dutawlbozPrWREKdeMUNWPYfvrwq3mAjT9QAwIcR40bNi7FO9tvZNSpbyItxQRuzPWI6GmT0JTEDL35%2Bn%2FNfuIWHhSlxgBBQcD88lPHd5w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3882652cbd0a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":803,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"a95571d5d3a29a50dc18a8e3f1015d9d","sha1":"53f0973605a67a399bf659b4836eb9115c9558e1","sha256":"68b7f55a91b3a60ea0a44f5024819b2f59fedad2580b72ee8508c1358ae66f7b","sha512":"eed1565e27267b37de3f513460a1e726826659ff9d7fe7d471417a1064b0df237cd18c9c5d1499e9375e680039f8428bb6b0244cafd7550b4013945409118afd","ssdeep":"","tlshash":"e8d023a35b05440d1511b7d04e4db79cc043cb7dbc10aa01fb567054b8b4339d545650","first_seen":"2026-09-09T18:11:03.186504Z","last_seen":"2026-09-09T18:11:03.186504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/83afe278b6a6bb3c-s.p.2bn3s6zvc0dyp.woff2","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.633Z","timestamp":1788977426633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /83afe278b6a6bb3c-s.p.2bn3s6zvc0dyp.woff2 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/0h-3iamtklzm1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"72e1071e514877c2d141755112247946\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Z3oa8hhbtnaarsvRnr%2Fy6Hpuc%2BQFglCNL%2FT0Ylju7SLfVYzVTXMkdmdzHDkZkyZf1WrHfO%2B8R3ILLJb%2B2OBZaRu2BK%2BM7JGYkRyqclqra0jRRpGeF6%2Bi63GlO7t%2FHKk7Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a38826548bf3a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":49120,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-09-10T05:22:52.32416Z","times_seen":100215,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/usdc.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.647Z","timestamp":1788977426647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /usdc.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dD0VDCotGRxHC96%2Bzjfdz9Wky4xgtWl5kcZYaPUgPzz2%2F02G9H2fAxp0iWJ8oZoAo7qEtDg8M%2FPukVTcHQiZ6joqEH3k5U0P5awFIJhX%2FMacGYHEwQfzvgHxqf0EksCmvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fbe8d504a5a1069d669eeec92c540293\"\r\ncf-ray: a38826549bf9a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2770,"size_decoded":1881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5caa435f06c04166d9778e6e8b8405a1","sha1":"96be7397286bf4f4f9aa6510358cbe597eab2779","sha256":"171b04a55adf790f64bcd38e37538d448685928558f1d08575118e24c5eab029","sha512":"94a46d5759afe632ecd3e9baed54095d793f7a568ad098e38742d9cda283713fef213338536f7ed5f90ce90e0bcc7fad5b42b803218bee3e687030faaac301e9","ssdeep":"","tlshash":"725122f5f3f8e1e89606b3e48575f03ab36130bd4b07c96c9fc17564ee2622d0591488","first_seen":"2026-09-09T18:11:03.189764Z","last_seen":"2026-09-09T18:11:03.189764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/eth.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.648Z","timestamp":1788977426648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /eth.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wOvh%2BVaTkncmi4CvJc8sg5MDm4Pv7jPCbZts9q8k9nmGQvf%2BL0cQ25Fmdh8f6PXl188EWbE3%2FBUso660dpvcIxbpUTDoRkC%2BPdxi8k25GRKcgHwddoVRVbwdoO4WcaDrDCI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3c6b746961cbde3970a8f58425df54b7\"\r\ncf-ray: a38826549bfaa5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":847,"size_decoded":1076,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdacba06eb0aa445e30a7abec34fea55","sha1":"53ef95d59ff00c7a619264aa2d46ec437355676e","sha256":"c1acb0e391c89d82a3318301d9f4282b1e677a0ef653951e019151afc1a5ef1f","sha512":"793612f67e3eddf99bd3ba404448637a1374e1cb51da35338f8024071a88796030c3dee9a90e067332f5c6f4911e361ab4e28cceebbc9ef11b1e2caed394ccf0","ssdeep":"","tlshash":"c6010cf071ccc718b6040b526b6960b522627af5d1788111ba81220379acdbf5cecbd5","first_seen":"2026-06-27T06:11:27.124594Z","last_seen":"2026-09-09T18:11:03.191837Z","times_seen":4,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/InterVariable-DiVDrmQJ.woff2","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://matcha-swap.com/index_4","date":"2026-09-09T18:10:26.670Z","timestamp":1788977426670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /InterVariable-DiVDrmQJ.woff2 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"92600ddba0cd8049ee345c11941cd7d4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDh7zeggMvnBd366jYM3IVKxsAOG%2BOJzfXV05JeCNuiMZQ8M6muXc5Oh0TmHFdLLrlxTsps3Ou152%2BH3jr5ennJGGH1R8DQ67Fkklr7Urn7g4gB3KubGNDm1ga35E0%2Bganc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3882654bc02a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 352240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352240,"size_decoded":352919,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 352240, version 4.66","md5":"2bf3d951bf9d6109437ea0874bbf12fb","sha1":"f55b18fdf5a4fbca23e23010fbe89df27d70d1ff","sha256":"693b77d4f32ee9b8bfc995589b5fad5e99adf2832738661f5402f9978429a8e3","sha512":"9c34339e338bc88488195216a834004c3cc2934896df8a5849c26801a88c7a4c4d84563d9cdae449d81bb379549f69f57c5fb9b199826adb8a88c3eb7d22bac1","ssdeep":"6144:NXxnNQ1mzp/C4K2K9y0deanlT3TPkHW644MVz66Z2YS78Eq/H493abRLF/VBoGuB:RxnNXpq4XF0tTPk2jzRkYS8/GabjC+a","tlshash":"fc742337370464501452c3aca8a70a57e6302de69fda07ecc7ae84e8899ca797f1f74d","first_seen":"2024-11-16T09:12:47.72962Z","last_seen":"2026-09-10T05:23:23.870509Z","times_seen":18125,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/swap-tokens-hero.png","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.640Z","timestamp":1788977426640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /swap-tokens-hero.png HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/30euf7ozn-qgc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c2f83aee5d8e5bebbfecf9d43d4a7c62\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FKooKeGRDfWNVDp4hoUQ3tEGBEjNjFzfbvJpuxbAD7ASuOxoZpPYyBSxbUPHcwiFUYjYRTkTcJAQP9U84wKzgY1Ha6upWZKv5uzAl1Uh93W9jlyP2USeJkBlYZ1NutcgXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a38826548bf4a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54583,"size_decoded":55239,"mime_type":"image/png","magic":"PNG image data, 6702 x 1149, 8-bit colormap, non-interlaced","md5":"bc5d3a5513b067da9011a889aa3b73f1","sha1":"d361283a2942412875a6c526f5443683c90ead3b","sha256":"f259e59c99e75f3b6c395f01633f2c7d380d28675f5f2dd4d30ea0447fea5e67","sha512":"e3f7ceb6af630654411aa4a9ca16748611a09f506bfaca759742ed4348b8cf9635d5668a70a48053d14aa89b3ef68d7924356cb203e95e949f2401fcff5814f3","ssdeep":"768:ekYnjBFFpaxozEPORlTIHWHTL2HqeMm6jykdXkmBdrcKgsGo/ag/Ho40IO10hXLy:nYnNF6xnWRdHTL2Hmm7+CMIxIPlE","tlshash":"3d33e0a4cc11cdf7dd5992b1ba1d8baaf37198ad1654022133f28dfbba26a38c05471c","first_seen":"2026-09-09T18:11:03.194025Z","last_seen":"2026-09-09T18:11:03.194025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/wave-lines.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.646Z","timestamp":1788977426646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /wave-lines.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IRdfh6LNrJa8Rh32nZX%2BdXVlBHkc2lUEUwQFukIxzGF7Ak1Ynln4RXzXsXSCPpeEbDC5JhaW%2FCyAVawk9clNJdCfTAw%2BTZpjxDvilNmM9wXPInWHV07%2BXMQA6jK4Lse3wk8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c99b04f8b2f32245cffbebfd23b38b15\"\r\ncf-ray: a38826549bf8a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2209,"size_decoded":1150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35b5fbdf59e982b8fc55125418fabf44","sha1":"222dc2be8f13723b5580ec93ed2de6c295914723","sha256":"a5fb21ba675ab5b9f53c246679e1e35c9e182cc881d37d593b24d5d1d588a282","sha512":"be17489bd133ac5281ca4ea3b1f7a945f3e1e87ef95344f25eb8363fa5f7379ed013b43133157f4c30db9ce09f7691ed66f40e5d3fa1a5bde9d5fd3628da6dc0","ssdeep":"","tlshash":"ea412b6ef31cec33d299d1dcd8018554136a529b69e8c2a182f5ff1f7538d822c1abd4","first_seen":"2026-09-09T18:11:03.196726Z","last_seen":"2026-09-09T18:11:03.196726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/shield.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.650Z","timestamp":1788977426650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /shield.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Up8PexgGNCsxoTWW%2FpTNTsc%2FabOmJ0y7V%2BemjQNK9K4RForwov3GJgX0r5zhD%2BzajrvnnWkot0E%2FCUoMk6by6Iqtk3USU1f5vh81T%2F18ZPpUlzx8GMFHWyak0HHzKPfL1Eg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6bdee7e893e44f36482139dd7bbe339f\"\r\ncf-ray: a38826549bfca5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4070,"size_decoded":2015,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cecae2e0bf192f64482094683fd9d318","sha1":"3f36c009812149f368e3915119d080fab77ef804","sha256":"6c170f34332625041fe75d74186a7b5ca71a003ad1a01e9e40fb940b9f556553","sha512":"53197403e1c32b3d0a136c2b2f3bd753d1b51d11bbf532a2ddabde02787db713263797aa19948722f40509cf9fa2dcfce02b70776a891ca0daf76ba58001b718","ssdeep":"","tlshash":"3d8110dd57b5cdf8a6c743f8fa143af97522082f25019624f4be14a02b410bcaa5fce5","first_seen":"2026-09-09T18:11:03.199033Z","last_seen":"2026-09-09T18:11:03.199033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/8b6ff3f22ff7c360.css","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://matcha-swap.com/index_3","date":"2026-09-09T18:10:26.666Z","timestamp":1788977426666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /8b6ff3f22ff7c360.css HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/index_3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BwoF%2FbVnMOUGwgEdwDBHU5ADCQe1ad5WiZC%2B113ywcWnDEUgIrEmzLpuPxSfcrHJinzGvyyyQnwaG2zRGqMAEi55Rtly3ICBd0BhdRkvT65fS31Nh%2F6s6B26RdqnwaN1x4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c4b387a1f2253bf322f4494979cefae2\"\r\ncf-ray: a3882654bc00a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121496,"size_decoded":23236,"mime_type":"text/css","magic":"ASCII text, with very long lines (58862)","md5":"7048c4ab11d43cee772524eb2d497cc6","sha1":"95ddc65276de67af3164f25633e7e5368e453ff9","sha256":"74851b5cc430b0424e703e1e46c9137280e6b9b1b2a834576fba7e2f2c26281d","sha512":"54c48a10e5258a549dff93e0108747d93e320012bdb8e8da279bdfb45e2cc8a9f5e2888d5d6d9ed63e7d00d923b754e2bce7870eb29e7973f097cbae23c4137e","ssdeep":"3072:nGyhfVqXbJ5ZsEAYCmp2IidlBoMp27mt3rSWxDhb995uIpzRh:nGyhfVqXbJ5ZsEAxmp2TFt3rSWxDhb9L","tlshash":"13c3821df612113f3c2780fdc29cedada116b1c0ee296be6be4261118ac67e35de7164","first_seen":"2026-09-09T18:11:03.201148Z","last_seen":"2026-09-09T18:11:03.201148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/0h-3iamtklzm1.css","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.306Z","timestamp":1788977426306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /0h-3iamtklzm1.css HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5tYEHfWmZ0bQt3J4iH66MB9nTdLjPz3ACQDG%2FpSIJvKXT5ijqXsJg0Y7EKDqHEzGqq2cjZXJQhO1YSx45Lv%2B6MXnGTZDPqKpZh3R8LqMvUBRwIZpGJgyRuGlb7nwk3fISI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d3978d1052577e09e19cd5fd0eaf8773\"\r\ncf-ray: a38826527bc2a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3607,"size_decoded":1771,"mime_type":"text/css","magic":"ASCII text, with very long lines (1981)","md5":"7744a7b3246432f8f2d81e0616139859","sha1":"b8daae9876bff736332b4f84648bce2d172f1057","sha256":"c528af3929f573e5d0d36e5bede610aa7f41a63767f4ac98a3e659804d23e2a5","sha512":"d4ff4c6847551f95a158a8c9bfad9ec1f5869d3e4f3896e8f2032270978fa188625315739b1eff3ba9f89a4f957decfade1f27f163823c4cc980121bc133d586","ssdeep":"","tlshash":"ac71dc24512fd609c1b3cd933ace3f537d1d602526695232a93a096cdeeb93b53e0b38","first_seen":"2026-09-09T18:11:03.203611Z","last_seen":"2026-09-09T18:11:03.203611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/109e6r7a-5887.css","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.312Z","timestamp":1788977426312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /109e6r7a-5887.css HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BWLiJ1%2BZ5%2FC053xCicOUeAaS4bVEwnR1%2B%2BsqwfKTiHdwSr5QYzVmnolv4EdAQzCFKbE6HHbTByVmp7RX8YBi9iyJFvbU7zZn8ymXGLR7MaEZFIu%2BXM9an%2BUQndb2tGqDRo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4f2f2e5d7e10211566360fb23ec6a86f\"\r\ncf-ray: a38826528bc4a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5065,"size_decoded":1786,"mime_type":"text/css","magic":"ASCII text, with very long lines (5020)","md5":"af962de0005e9c6be6418fe5f289f870","sha1":"1708e339e9188cd8f7df7c797a48eedffe6c0c02","sha256":"940106a122acf473e172cc87671481fa45f9c235b5b86940b772dd791e1fe323","sha512":"3a3545b080c4ab16a7d2bb47ce0a0e697151bde1005ea5f2487d7dd4aea50e048142adea123821b807941a421eddb9b67f61e51b59285f7e185ca9d475d53ae1","ssdeep":"96:yMDC4dqxUqP94a/XwvHPMpncdbntMT3wM1stt:yMDC4cmqP9D/gvHkVUjGT3wM1e","tlshash":"2fa11e64e4283a23164fcb7fc4e8ecca5b515d22aa3a173f71608664f59fc9243b2533","first_seen":"2026-09-09T18:11:03.205681Z","last_seen":"2026-09-09T18:11:03.205681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_2.html","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.314Z","timestamp":1788977426314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_2\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzpAmeT5F6e%2BsVgpmppAAoQs08k6luE%2FyUB7NrMvxzfe%2B46ml9prM0PwlQlefV9M0pEMCGblUyIwCouU%2FZ6ccEo30r4bes89Bt61Lpt5HusHoRnU%2FIi6E0i%2FoK3y%2BAh2swY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a38826528bc7a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-10T05:24:33.210864Z","times_seen":18376549,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha.xyz/apple-touch-icon.png","fqdn":"matcha.xyz","domain":"matcha.xyz","tld":"xyz"},"ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.627Z","timestamp":1788977426627,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: matcha.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 \r\ncache-control: private, no-store, max-age=0\r\ncontent-type: text/html; charset=utf-8\r\nserver: Vercel\r\nx-vercel-challenge-token: 2.1788977426.60.OTZjYWZlZTUwYWYxNTI1NmM1MzZiNTU2NTNhM2VmYmI7NWM4M2Y1NTc7ZTkyODA5YjFiNjFlNzc3MWQ1YmU2NDNlZDhhODQ0NmZhZjAzM2Y0YjszO/uzh22sEcafsLBboJLtrLsu7bTGaq0Xu/v5XIcas7C0g470W/RK63DIcjhe7HY=.56e64e6c07f9202f7597096b959123e9\r\nx-vercel-id: arn1::1788977426-aqZPWZIr4R7Tyn18cwyaErnXx6BOKwQ0\r\nx-vercel-mitigated: challenge\r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-10T05:24:33.210864Z","times_seen":18376549,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/diagonal-lines.svg","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.642Z","timestamp":1788977426642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /diagonal-lines.svg HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZ7G7gj6JdTTsstOjYqojNYtrYAZ1dFlIZxe8WxI%2FZgH4PclJM9RWsA1qK3FqkkyTHYIPv5v0ct4tZyGZ7fd0bQUkTWS7GIaf%2FKEaOreB3h%2Fa5QZu%2Bas1TDOz5Snf5PcIDk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d1711bbb487f5c84b3d6f582385cbcf4\"\r\ncf-ray: a38826549bf5a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":1353,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e44169ffcdc1f17e4bc24b117ec021e","sha1":"50406df628db0743f5923d825427e718cdac5379","sha256":"14a3f3a09334f714be8b14eef791185d856465d8b43f5b902ca292643b9468fe","sha512":"dfb8cd469d1b689f951383f07454ae605a289c53e1dc0056dca906df4a2e5af21ba6b21b25c1531b2f965797a9795ce7ece38933b9c8c3dcba7db7f6181db500","ssdeep":"","tlshash":"122151bdf50e683adb91879c469295e4405997beb38e0024c3c0bf5d622dd90d82e7c9","first_seen":"2026-09-09T18:11:03.208066Z","last_seen":"2026-09-09T18:11:03.208066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/Matcha-Logo-Green.png","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/index_2","date":"2026-09-09T18:10:26.672Z","timestamp":1788977426672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /Matcha-Logo-Green.png HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/index_2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f48630eb3fa737de2439d2c4b07da50b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZeIKIPGUkq1L7Y12nk6i0HVEs7V6fsOPA0YEMU%2BmTpqDzaS23IyYbeTrcmXUsMGn9KU1g%2BSmDmV05iu0wD%2Fd6z4zYruLM2WCuEJfwRmfQqkU%2F0kb493MqT7a9MBEC3OnjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3882654cc04a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 131295\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131295,"size_decoded":131958,"mime_type":"image/png","magic":"PNG image data, 3307 x 3285, 8-bit/color RGBA, non-interlaced","md5":"e54d81839d67f8035bbb3aebcacecbcd","sha1":"98b360bf3a20ed19d87597129c3f9c0b3bb39ff0","sha256":"6740d4c8d23635f547fb499be150debcae7397320743c2835ff8017ddc02ac8d","sha512":"ac1cc229f3152bc8e2078223e96cbcc7ced72bd6048f88175f0ec9b9da367eafb5c220e15beaacfce4d9c39c9c67904ef312e46d26785100223847a5fbcac5f7","ssdeep":"1536:TMevwEabPZomwgDgSjjcTJFFbNl1xpjxL60cRCjljkx5SwaKDos:Yev0oCiJFpLRjxL6Be05dws","tlshash":"01d3cf12ae272edde94529bbd4622f047790017a4b542b0f8b79f0da8edb64370d34e7","first_seen":"2026-09-09T18:11:03.209923Z","last_seen":"2026-09-09T18:11:03.209923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_5","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/index_3","date":"2026-09-09T18:10:26.711Z","timestamp":1788977426711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_5 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://matcha-swap.com/index_3\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRiPjn2PEmMJStE8mCLAkpbXsA1JjQPYI8k3dhNyhmtD4DYc%2BJGUqs81VBTWqDJxbdQ4%2Bpl5wy6yrIRnY%2FMYrbXFO2Mpad6w2iKCHfSUZEABxsO9KMeQVXbGnK27xWQGfW4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3882654fc0aa5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":785,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"b79fb10fef76cef0274399cb549e9770","sha1":"44921708031fc76c1184034901acde0a2bb86066","sha256":"0c5be9d1df4fb18dc879a7e2da3731d4479a24f96a5c2d16ae2474b2c8c307e5","sha512":"f1088e0c2376b6b98bd14859f1ba25f0808658ce9b2a263d617d9eb5641bea0c4a8a236578ef32c31b833fbd44e082e32835753d77792d7ab1173928ab737d33","ssdeep":"","tlshash":"5ec022634701480e2200bbd08a4db78cc083cc3eec10ac01fa226040a8b4325c106aa8","first_seen":"2026-09-09T18:11:03.212138Z","last_seen":"2026-09-09T18:11:03.212138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_3","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.359Z","timestamp":1788977426359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_3 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://matcha-swap.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4xFppsU60oT7OV2ctN76KdeMtKawl%2FYNouDoB6ROF32Z5D2lIRb%2BpOsICx9NurhSMtidd1%2BuWw9puYyRPU6yp8y7ILzUJZ15kH8bTDA8uWgxRjthQW%2FDvP5pQnLTVv3vfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3882652cbd1a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1071,"size_decoded":1230,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1070), with no line terminators","md5":"18945c131282016899fe7b6417bfbd8c","sha1":"74939829d7e62296f2405ea76407f7ef898027ac","sha256":"0cb958f109778f123ca1b9d479e9df30701c893f4b5d180453fdcf8a7d14bca9","sha512":"de4161452903f757bcfb73ff81225520ab8670346d7f2f4e6d0fe55c8f59114c09c9d98f58795ad317b75773f7101789e88eafc95bd6d2cda0f664c36d62e28c","ssdeep":"","tlshash":"8f1142f1a4011c256027b3c0e889e18c4443f71eef4119e8bede291ec46d73d541e6a9","first_seen":"2026-09-09T18:11:03.214283Z","last_seen":"2026-09-09T18:11:03.214283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/index_2","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://matcha-swap.com/","date":"2026-09-09T18:10:26.362Z","timestamp":1788977426362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /index_2 HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://matcha-swap.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrkw4k6vrkiQnBOgVUZ8z1BNiLpewyh5VBOY2Kw6mQ%2BIOnRUi6Nfjl7Xor%2B0dpdP1VFUDhh4yvE3J4un5kjMJ8rxSTm2OTP8Me5xzXeTgax8NFJYA874YXViMWueI%2Ba2B9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3882652dbd2a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216403,"size_decoded":40817,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (52771)","md5":"1e066c869341fe02e18263b2846f9a51","sha1":"661fcf98204e8df9d1069ec3837c565c12bd4833","sha256":"56e225b048f39295ace98d78ee8540bf411767d81cbe01f7e75c62198a09bbf0","sha512":"f9d65d2cf4ae0f3e02cfea9baeb1d6fb2d2114be4165b69b09f025ab2aaab336c37536fc09989e39d1262dbbb6b1716d27b6c8c327d4b1391d771afbaee4f8f0","ssdeep":"6144:vwGR9Pkuxvah0lSIQkkh3VyJSLp7nnJSdPby1mbvlg8G4VibUM278q6/jzTkZ:gnnJe","tlshash":"3b24f855f128da3fbc3b453e62ccea5c630eb545de218bfaf210a12465c66e71cab704","first_seen":"2026-09-09T18:11:03.216413Z","last_seen":"2026-09-09T18:11:03.216413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matcha-swap.com/pylon.png","fqdn":"matcha-swap.com","domain":"matcha-swap.com","tld":"com"},"ip":{"addr":"104.21.72.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matcha-swap.com/index_4","date":"2026-09-09T18:10:26.671Z","timestamp":1788977426671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matcha-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:56:23 GMT","end":"Tue, 08 Dec 2026 14:56:18 GMT"},"fingerprint":{"sha1":"0C:ED:17:83:80:BD:EE:EC:D2:0B:51:CB:1E:E3:2D:A6:E6:23:0B:3F","sha256":"88:38:7F:A6:8F:C7:5E:12:0E:80:97:4B:37:87:BF:16:13:B9:BF:F8:A5:A2:9C:14:CF:F4:68:F2:0E:F3:66:92"}}},"request":{"raw":"GET /pylon.png HTTP/1.1\r\nHost: matcha-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matcha-swap.com/index_4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 18:10:26 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"85056ebe83cdacb322ba769877e69558\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXi9Kj0trKHWtlz02dl6g8pxpYDVSFTUPT9qrNfV8Cb79nQSko%2BkLcCbCKbIPdol995Z4M2rJ3knVR7RK8Ed7cbxsi50VunKkOY%2Fwrmeav3mBeOhNF1pD%2FH5WXaflxqtV9k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3882654bc03a5fc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2046,"size_decoded":2705,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"5ccd35e88d90f139b250cacd7292a071","sha1":"c20c5bc2cbecfb22e25f2b373b25ff89376f61b2","sha256":"bcab472b4c68ccd6ac6c1cb6b540c0ed9f005416f4ce1bfe5f46db0bc6a3a819","sha512":"10689db01556b13cfa69f968b441874fb75c8724636eae1c5ffca19250016e52568f256798e48e94967a28b6891dcad584d5cced30225ef85f446327a8f1ad37","ssdeep":"","tlshash":"8a41d7a0f07d414dc7b9fa752669e012d89b10af01330ea11e95a9fda210f078ad63f8","first_seen":"2026-09-09T18:11:03.222525Z","last_seen":"2026-09-09T18:11:03.222525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"matcha-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}