{"report_id":"57da91e7-23b3-4d7c-9a64-b3f633a8ec48","version":6,"status":"done","tags":[],"date":"2026-03-28T11:28:12Z","url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"title":"Buy \u0026 Sell Monero Anonymously | No KYC Exchange | MoneroSwapper","dom":{"size":98105,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8244)","md5":"4fc40d13878ecd965bfbd1b393792570","sha1":"92af7772495836173e3ab239b1bd1d89c4cc24f8","sha256":"3777c8f19d6e680c091d6ff1ae3693c393108e1e8723a6b1792ef333afbcbcc8","sha512":"83da47781269fd7e530528a64d355d441df945a245874e98664f95475aeab480a579eea6ba981ea016503de8b823e0c9a30715684ec27f23e5cc48ee27dacc64","ssdeep":"768:EClv/aCXLjnbwWIIaRADTlqxQc86B+yKRfAJKyEWrXrNoFYRCEOtgJhElHra4v6k:EiHtLjwulLa66lbu8/9JmawjN7","tlshash":"b7a3f76532a10e3d11d783bdb7a7bb697169c183d90b9848f6acc2240fcad49dc736e4","dom_hash":"domhashdfa62237af9e9cdb32d053035bc51d23","first_seen":"2026-03-28T11:28:15.801605Z","last_seen":"2026-03-28T11:28:15.801605Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T11:28:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":1,"received_data":384319,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":1,"received_data":47423,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"b.sf-syn.com","ip":{"addr":"104.18.5.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-15","domain_rank":902822,"first_seen":"2019-06-07T19:50:54Z","last_seen":"2026-03-21T08:46:08.988241Z","alert_count":0,"request_count":1,"received_data":2265,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-22T22:38:17.64832Z","alert_count":0,"request_count":1,"received_data":438,"sent_data":899,"comment":"","tags":null,"fingerprints":null},{"fqdn":"moneroswapper.com","ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-03-28T11:28:12.658192Z","last_seen":"2026-03-28T11:28:12.658192Z","alert_count":7,"request_count":7,"received_data":179042,"sent_data":3633,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2228,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.15.8/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f53c06f93ae095221ff718c3a158a93","sha1":"9572c80b2918c796eea3c16eba905ef835aeb41b","sha256":"899842782a7fd16fcc2d7a7c877ff9ec159394044c87b158b2ef132786606932","sha512":"d9ac61274b8de67808c2bc86fbdfa5b45d9c9858285a5bbf6a1ad21db09d4159e66bfe2c2fa2a8759591c17b224667b559e82fc71e6343b2df8d26a0375abe9e","ssdeep":"768:gDWpHFKOT9onx0mD+zcyLAE+7jNb+mQmPl7cQqDTvmtfbYxeE3X5K:iWG1h+cMAE25+mQ+LqOf8p5K","tlshash":"dc23f8e97396b53283ef01b180bb460af33d2990550e5468f769d8da383948d41f3fba","size":46632,"data":"","first_seen":"2026-02-03T15:27:32.411372Z","last_seen":"2026-07-27T05:24:59.83971Z","times_seen":993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17948737756","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86349186db5957724d096adbd6ab7aef","sha1":"6c8bcdbc8ca06dc6a39e741d292ec6eb21e90076","sha256":"dc6d7a0da4e47bdf335cb876911e57103bea5c502f14398a625ac567177618a8","sha512":"de8acf9fbb10d7b16a25d8cd6f2fc6963b09cccf8ae135328696a466d3d1c34124e03a4a098f87a671277d5c77999c2e06b26e520504e1aac0651074771f07aa","ssdeep":"6144:oORjaFDrVJlQGXnIzs8WVud1W+rwkQdMQsYXry+n:WDxJlrIY8l01","tlshash":"9c8409cdb3d6746653a3a478903f008bb17a69e2b84cc895f185dce42e7469a4277f3c","size":383669,"data":"","first_seen":"2026-03-28T11:28:15.808766Z","last_seen":"2026-03-28T11:30:27.974324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-07T09:07:39.112543Z","times_seen":190286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.15.8/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a23b003a77f0753b7f0f4ff34c977099","sha1":"9f7ca9508c7c9a4f30b370b17b3f219ba04c949e","sha256":"9a56107fe3fa5e7c1cf37c221e5a4d75ed699016b85d9971c3e6f58164237cc1","sha512":"660350f1fc0849317c059fd3cf80fa30b7f7aeca09e95c5cfd98cb49bde4836526c3bfd72423cca41e678e70d26db56a163422bdd9f7f0baafefaa81ea9e4c66","ssdeep":"","tlshash":"afc09bc498c75900c3573591c035543b62346661917f4875173de7d5953315ae15cc9d","size":136,"data":"","first_seen":"2023-04-15T22:30:47Z","last_seen":"2026-08-07T08:23:06.369006Z","times_seen":6605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.15.8/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"10580ad0bc3ea7ac43d556702a16299f","sha1":"f84fe31960c098db1f541e63327043a2e864cb1f","sha256":"fc4d427083f4ce04bdfef5f0f7777887673c4ea791e332102df4f232175b0035","sha512":"da1f9fda5762332ac24402b8b25cdbe1fb537e6bb38bcd9553025c427ceaf826991f95ada669dcccdc893e1fa60fc1e5c892ab88f6e5c018d20a90903f065a8a","ssdeep":"","tlshash":"c7b09bc458c75900c2173591c035543761341661917e4465173de3949533116e15cc9d","size":128,"data":"","first_seen":"2023-04-12T18:09:08Z","last_seen":"2026-08-07T08:23:06.247375Z","times_seen":11642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.15.8/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"eac8665533335a8d7b83c1196fb8c7e1","sha1":"69e9d4951270b3488ed7c29a222f741cfdadee96","sha256":"06c7c50a400e903f4ae5b7428af7061dd867f8c9cef3ce4e04fcbdb3ab7bf356","sha512":"1fa668a22144293d13b85459a6b546e78e1c49f9125da2adc94f60416345d7b66549aa4931fe0059ffc879790e5b435b7db83e29c8e55df16bff36d04ca0b4bd","ssdeep":"","tlshash":"55c09bc458c75910d2173591c036553762342661917f4465573de394953311ae15ccdd","size":136,"data":"","first_seen":"2023-04-12T18:09:08Z","last_seen":"2026-08-07T08:23:06.242152Z","times_seen":8101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8394157776f482cc5c30ede9ce4b1322","sha1":"8ea64180f1bfbc0d17a8e3c71f318d2fab1dd1ce","sha256":"96f89928c618fbbb67a5a51850d2a5ad642671b87d72c83606b6eed13c6bfba9","sha512":"490117658c822defa866772e7b34001ce46bbadc5112c134b84b0dabf483428bc7ffac144a5b02e0109668b33130892f031a52cba118d9ca591b908ab07aed0d","ssdeep":"","tlshash":"97c08ca4250b0c6101bb2f060f3fb204704a2313a490ca313d0e72840f39e0bea98844","size":174,"data":"","first_seen":"2026-03-28T11:28:15.833712Z","last_seen":"2026-03-28T11:30:27.980802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ee648d36305c1b068c08e4c41818d34","sha1":"bc0ba7cc834d61e6b7758ce9374042c1ff2a8e96","sha256":"637708124f74547d7aacaad362eac675dfa3e7c50340fa69d23e48ba7de692d6","sha512":"07c32d6adcc0e6eb0cd9c3307b347147d6379af74e9da1bf61c432e3849c384e232a3d5da2f6c14ee877c4d51b9cbbe85515c3ba285c94e5c2602d34255f029e","ssdeep":"","tlshash":"8df020b26a089cd213f312f973f7a3067a92111a34109540e419e5487fa2a7f8a0bbcc","size":569,"data":"","first_seen":"2026-03-28T11:28:15.836722Z","last_seen":"2026-03-28T11:30:27.981578Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"86d48bfa9cceb154e51aa9ea82746fca","sha1":"eb7ec80336a56e81a326b53e012e1b7a12d56337","sha256":"99f447437d13d9bf91628de700fdd6aaed62115641a51aeabfa7569d12e9dc74","sha512":"4f9b0d11aaa36245009cdac33c1941a288e842c47a9a19a75278408a0508fbc33d7971ec1531cacf2ecb03e4db75cd66470bccdfc47d25678754539cdc0b3443","ssdeep":"384:7lXAmxhiEGHmHOZ5WE5EfE8E4EVM9xwdB0eT:75AgGHTZ51Ksn7IxwjP","tlshash":"96c2516b32b618340afb75ff27cb6388342490436485d9993d5ccb644f92f85a877be8","size":26841,"data":"","first_seen":"2026-03-28T11:28:15.83917Z","last_seen":"2026-03-28T11:30:27.98236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcb758cffd3a1ed7c2583e4b81fcea40","sha1":"c6f851015b3e17822a5134b7fe062b30d3f11140","sha256":"3dd49afb9038705a2f5fd6576d5454da12f54977c5c7d4338c29a10302bfb80a","sha512":"b92bcc706f78f83d55bfb16e74f3876f9fc2d9eb56550d78ba8b2c34f782edd0d81e68614653c4f4bcf73f58a7d0df913247898b6b68cb817a614a9b667d4b6a","ssdeep":"","tlshash":"f6d022ab3810a830238a09bb713eea5935a370a8c8008912cc9fcc083914eff8812d5e","size":205,"data":"","first_seen":"2026-03-28T11:28:15.841652Z","last_seen":"2026-03-28T11:30:27.984232Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.15.8/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ef089f58bda76fcc33654f10ea60480c","sha1":"9648039b975f75419e8abd664b422999ef2d6906","sha256":"32ca86163b511e050a5eea26a81f2495b0606c3da2707dea45d00b0e62f73aeb","sha512":"eed602abfa0cac3f6b27059710354ef4eacd4100abd70ad619fdb95f253e34ceb5d8981f06a2e4177f5ba949fec322d92caa21f5f292c0dc5297e35092809d51","ssdeep":"","tlshash":"42c02bc488c20900c3073590c039803731341260c07d44aa173ce3909833026e00ccdd","size":139,"data":"","first_seen":"2023-04-13T23:00:32Z","last_seen":"2026-08-07T07:17:00.92601Z","times_seen":7782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moneroswapper.com/assets/favicon.png","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneroswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 21:50:07 GMT","end":"Tue, 07 Apr 2026 21:50:06 GMT"},"fingerprint":{"sha1":"76:AF:AB:00:A6:FF:68:F4:AF:9D:FB:F3:D7:17:48:A6:20:5C:E7:6E","sha256":"3E:57:DC:49:02:84:9C:E6:E1:AC:5C:7D:2D:40:FE:41:EA:B6:D3:B1:7C:7F:B0:70:73:C1:63:AF:4D:BF:0E:C1"}}},"request":{"raw":"GET /assets/favicon.png HTTP/1.1\r\nHost: moneroswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0f833ef783e312abc656359eff6bfd1; _gcl_au=1.1.1860812301.1774697271\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 11:27:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Feb 2026 21:32:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6983bae5-997\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"33dcc1976dcd7d9518962db9b3517709","sha1":"89e2e714f5eb62596015e6847bea7f9c1d799740","sha256":"876837e9ed7af7bfc72ba8ba30528a374acb817611993d8d9d9322754ef49d65","sha512":"d1f078a096e3934620485af7b367edf965446ffc7bb73c57519c1e214d50348f3bbf1ac6f27accc8be418181de8f032d6a4b6b6891be4a63c1ea45df1b36bf56","ssdeep":"","tlshash":"d3512b4a70004d773a38042b463d761744f2bd3d4763964ba421f9683a762a30b2f1fd","first_seen":"2025-10-19T19:31:50.014033Z","last_seen":"2026-08-05T22:27:43.348536Z","times_seen":69,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/assets/tailwind.min.css","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:50.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneroswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 21:50:07 GMT","end":"Tue, 07 Apr 2026 21:50:06 GMT"},"fingerprint":{"sha1":"76:AF:AB:00:A6:FF:68:F4:AF:9D:FB:F3:D7:17:48:A6:20:5C:E7:6E","sha256":"3E:57:DC:49:02:84:9C:E6:E1:AC:5C:7D:2D:40:FE:41:EA:B6:D3:B1:7C:7F:B0:70:73:C1:63:AF:4D:BF:0E:C1"}}},"request":{"raw":"GET /assets/tailwind.min.css HTTP/1.1\r\nHost: moneroswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0f833ef783e312abc656359eff6bfd1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 11:27:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 06:23:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b8f371-afea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45034,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45034), with no line terminators","md5":"16f2450243b207e9237f6f401937088e","sha1":"78b91b209ed7aadc6a69a24830b4c431275ee186","sha256":"260a115d21fa9a7081c6a0fba404f719c89b59179bf4446641e005e344a9a30f","sha512":"fc35d06f26b8bad1bdced924637f76b89f451aebd28c3641310943944645fb5f9c55b49b2afa3ab638bcea5fccbaf4d7dea2e166e389686a6f4949d223658b6b","ssdeep":"384:GHPqhgTNcfWEb8RIPqm6VjKIRYrvRs/JLX3/A/0/tZNiRGKPb1K12P:GHiheNcfWVM6n/FZNiRToY","tlshash":"6e13632dab91053b7c1390fae5a9e95de11ba1c2ee3967e6fc8252015ff12f72c53600","first_seen":"2026-03-28T11:28:15.805321Z","last_seen":"2026-07-12T20:11:02.182176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moneroswapper.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 208192\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-07T09:07:39.072724Z","times_seen":254255,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":171,"dns":1,"connect":32,"send":0,"wait":42,"receive":21,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moneroswapper.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 208192\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-07T09:07:39.072724Z","times_seen":254255,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":204,"dns":0,"connect":30,"send":0,"wait":29,"receive":15,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:50.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Mar 2026 11:27:50 GMT\r\ndate: Sat, 28 Mar 2026 11:27:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-07T09:12:28.958656Z","times_seen":39599,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":94,"dns":1,"connect":7,"send":0,"wait":17,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17948737756","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:50.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:22 GMT","end":"Mon, 01 Jun 2026 08:36:21 GMT"},"fingerprint":{"sha1":"41:BA:93:ED:C4:9D:A5:E1:77:B1:34:E0:50:58:DC:74:05:25:A7:9E","sha256":"97:3D:61:D2:63:EE:A7:B7:74:9F:26:53:8E:77:7A:42:66:0E:E6:AC:F3:26:C2:88:B6:E7:04:58:8D:D0:10:80"}}},"request":{"raw":"GET /gtag/js?id=AW-17948737756 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 28 Mar 2026 11:27:50 GMT\r\nexpires: Sat, 28 Mar 2026 11:27:50 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 28 Mar 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 133596\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383669,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"86349186db5957724d096adbd6ab7aef","sha1":"6c8bcdbc8ca06dc6a39e741d292ec6eb21e90076","sha256":"dc6d7a0da4e47bdf335cb876911e57103bea5c502f14398a625ac567177618a8","sha512":"de8acf9fbb10d7b16a25d8cd6f2fc6963b09cccf8ae135328696a466d3d1c34124e03a4a098f87a671277d5c77999c2e06b26e520504e1aac0651074771f07aa","ssdeep":"6144:oORjaFDrVJlQGXnIzs8WVud1W+rwkQdMQsYXry+n:WDxJlrIY8l01","tlshash":"9c8409cdb3d6746653a3a478903f008bb17a69e2b84cc895f185dce42e7469a4277f3c","first_seen":"2026-03-28T11:28:15.808766Z","last_seen":"2026-03-28T11:30:27.974324Z","times_seen":2,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":168,"dns":0,"connect":34,"send":0,"wait":59,"receive":78,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/image_proxy.php?coin=BTC","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:50.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneroswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 21:50:07 GMT","end":"Tue, 07 Apr 2026 21:50:06 GMT"},"fingerprint":{"sha1":"76:AF:AB:00:A6:FF:68:F4:AF:9D:FB:F3:D7:17:48:A6:20:5C:E7:6E","sha256":"3E:57:DC:49:02:84:9C:E6:E1:AC:5C:7D:2D:40:FE:41:EA:B6:D3:B1:7C:7F:B0:70:73:C1:63:AF:4D:BF:0E:C1"}}},"request":{"raw":"GET /image_proxy.php?coin=BTC HTTP/1.1\r\nHost: moneroswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0f833ef783e312abc656359eff6bfd1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 11:27:50 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: public, max-age=300, s-maxage=600, stale-while-revalidate=86400\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: same-origin, strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://b.sf-syn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6640f6c94a3ed9df59b31bb881a91415","sha1":"1190cd697f2a0c2ee61661a5fe8d58020c25e796","sha256":"1af9153e7a8fd6ab8190a70b5ea58e591c6f5fc43df366838c34f12e8848b939","sha512":"fe8d6cd4b53142bdd100d86f93f3d7788b6f2e88a0014cf88b1c39c20452a49ebc2e97585ef12a667147fa7e8e31a7dd57b964dfffff9d36eae0d9fbf182bf34","ssdeep":"384:nq7P+l10PctVDZeWi5TgqvIpJA4k5sPipbu73RNiUWYvX9cEDJkTEL/eXyWSyc0e:qb+o0tVDI5Tg3pHPipq73ReY/mokwLWk","tlshash":"a4a2e1653f5004b7bb6da309c5c7c682782fb8e2a754849b7880d1f932a3cd647786b3","first_seen":"2023-11-27T10:33:34Z","last_seen":"2026-08-07T05:06:32.694493Z","times_seen":113,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/image_proxy.php?coin=XMR","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:50.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneroswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 21:50:07 GMT","end":"Tue, 07 Apr 2026 21:50:06 GMT"},"fingerprint":{"sha1":"76:AF:AB:00:A6:FF:68:F4:AF:9D:FB:F3:D7:17:48:A6:20:5C:E7:6E","sha256":"3E:57:DC:49:02:84:9C:E6:E1:AC:5C:7D:2D:40:FE:41:EA:B6:D3:B1:7C:7F:B0:70:73:C1:63:AF:4D:BF:0E:C1"}}},"request":{"raw":"GET /image_proxy.php?coin=XMR HTTP/1.1\r\nHost: moneroswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0f833ef783e312abc656359eff6bfd1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 11:27:50 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: public, max-age=300, s-maxage=600, stale-while-revalidate=86400\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: same-origin, strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://b.sf-syn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"33dcc1976dcd7d9518962db9b3517709","sha1":"89e2e714f5eb62596015e6847bea7f9c1d799740","sha256":"876837e9ed7af7bfc72ba8ba30528a374acb817611993d8d9d9322754ef49d65","sha512":"d1f078a096e3934620485af7b367edf965446ffc7bb73c57519c1e214d50348f3bbf1ac6f27accc8be418181de8f032d6a4b6b6891be4a63c1ea45df1b36bf56","ssdeep":"","tlshash":"d3512b4a70004d773a38042b463d761744f2bd3d4763964ba421f9683a762a30b2f1fd","first_seen":"2025-10-19T19:31:50.014033Z","last_seen":"2026-08-05T22:27:43.348536Z","times_seen":69,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T11:27:49.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneroswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 21:50:07 GMT","end":"Tue, 07 Apr 2026 21:50:06 GMT"},"fingerprint":{"sha1":"76:AF:AB:00:A6:FF:68:F4:AF:9D:FB:F3:D7:17:48:A6:20:5C:E7:6E","sha256":"3E:57:DC:49:02:84:9C:E6:E1:AC:5C:7D:2D:40:FE:41:EA:B6:D3:B1:7C:7F:B0:70:73:C1:63:AF:4D:BF:0E:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moneroswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 11:27:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=b0f833ef783e312abc656359eff6bfd1; path=/; secure; HttpOnly; SameSite=Lax\r\nonion-location: http://llh6wrygjmhqsho6wturufyfkmy5haej74jatknm4qvr7wb4v5bg6zad.onion/\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: public, max-age=300, s-maxage=600, stale-while-revalidate=86400\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: same-origin, strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://b.sf-syn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":96829,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5888)","md5":"f4c32de5f15d8757f0d68445696bd51e","sha1":"a67b51566d70ddf189411bc7cdaea47b8dba8734","sha256":"2c961e0b263f82cfa2949bdfd77a1921c604a28f02f9dd4b4a1fc444fd53c03c","sha512":"865ee52cd412d6bb07ea40b142aabeca535c9d6716b6a8922bf896f351624974dea83646edb4484a3b7c085817531cf12a196515eaa4cf6004bb84b5e1d6b8e5","ssdeep":"768:7lv/aC3LjnbwWIIaRA+TOqxQc86B+yKRfAJKyEWr4h8D4xKpbX3SYqoMQ4XUnR/P:pHlLjaVMTXqRbbqjOP+mawjN1","tlshash":"b493f86672a10d3d11d382bdb7a7bb697169c183dc0b9858b6bcc2240fcad49dc736e4","first_seen":"2026-03-28T11:28:15.812272Z","last_seen":"2026-03-28T11:28:15.812272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":345,"dns":7,"connect":162,"send":0,"wait":325,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/api_proxy.php?action=rate\u0026coin_from=BTC\u0026coin_to=XMR\u0026amount=0.1\u0026network_from=BTC\u0026network_to=XMR\u0026rate_type=float","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneroswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 21:50:07 GMT","end":"Tue, 07 Apr 2026 21:50:06 GMT"},"fingerprint":{"sha1":"76:AF:AB:00:A6:FF:68:F4:AF:9D:FB:F3:D7:17:48:A6:20:5C:E7:6E","sha256":"3E:57:DC:49:02:84:9C:E6:E1:AC:5C:7D:2D:40:FE:41:EA:B6:D3:B1:7C:7F:B0:70:73:C1:63:AF:4D:BF:0E:C1"}}},"request":{"raw":"GET /api_proxy.php?action=rate\u0026coin_from=BTC\u0026coin_to=XMR\u0026amount=0.1\u0026network_from=BTC\u0026network_to=XMR\u0026rate_type=float HTTP/1.1\r\nHost: moneroswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0f833ef783e312abc656359eff6bfd1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 11:27:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nonion-location: http://llh6wrygjmhqsho6wturufyfkmy5haej74jatknm4qvr7wb4v5bg6zad.onion/api_proxy.php?action=rate\u0026coin_from=BTC\u0026coin_to=XMR\u0026amount=0.1\u0026network_from=BTC\u0026network_to=XMR\u0026rate_type=float\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=300, s-maxage=600, stale-while-revalidate=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://b.sf-syn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"34f507cd033ad6f701c375c25eae0bc4","sha1":"f27b2931a70d3cc1061f508dae06a8956ea23c8f","sha256":"41e7ba2016e4859c95e7aa055ebca4988c756c451fc961dcadc751cb5d0c5e00","sha512":"109641624a4f2fa387d71d1bf9f4c8660d8f93e16bec504f8aa2e7fa95bd2cd96dd460fb82e7661f1c17ee6b9aa6f01f1f1420de2b34925dc66a417f5a6be1f7","ssdeep":"","tlshash":"80a012861000409b04825328280058106286008144602d2444150f2655461876e93487","first_seen":"2026-03-28T11:28:15.81397Z","last_seen":"2026-03-28T11:30:27.978216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.15.8/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:50.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/alpinejs@3.15.8/dist/cdn.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.15.8\r\nx-jsd-version-type: version\r\netag: W/\"b628-lXLICykYx5buo8FuupBe+DWutBs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 793006\r\ndate: Sat, 28 Mar 2026 11:27:50 GMT\r\nx-served-by: cache-fra-etou8220189-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 17260\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46632,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41221)","md5":"7f53c06f93ae095221ff718c3a158a93","sha1":"9572c80b2918c796eea3c16eba905ef835aeb41b","sha256":"899842782a7fd16fcc2d7a7c877ff9ec159394044c87b158b2ef132786606932","sha512":"d9ac61274b8de67808c2bc86fbdfa5b45d9c9858285a5bbf6a1ad21db09d4159e66bfe2c2fa2a8759591c17b224667b559e82fc71e6343b2df8d26a0375abe9e","ssdeep":"768:gDWpHFKOT9onx0mD+zcyLAE+7jNb+mQmPl7cQqDTvmtfbYxeE3X5K:iWG1h+cMAE25+mQ+LqOf8p5K","tlshash":"dc23f8e97396b53283ef01b180bb460af33d2990550e5468f769d8da383948d41f3fba","first_seen":"2026-02-03T15:27:32.411372Z","last_seen":"2026-07-27T05:24:59.83971Z","times_seen":993,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":36,"dns":1,"connect":13,"send":0,"wait":15,"receive":3,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.sf-syn.com/badge_js?sf_id=4068334","fqdn":"b.sf-syn.com","domain":"sf-syn.com","tld":"com"},"ip":{"addr":"104.18.5.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:50.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf-syn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:44:58 GMT","end":"Wed, 10 Jun 2026 21:44:45 GMT"},"fingerprint":{"sha1":"13:E6:A3:31:AF:FF:1A:3D:52:C5:E5:DC:DA:2A:DC:2A:75:39:91:07","sha256":"1A:97:C7:C1:04:00:94:3C:90:D5:AC:E6:C7:68:73:24:2E:3F:82:04:58:57:83:09:54:B5:81:12:15:C4:5E:46"}}},"request":{"raw":"GET /badge_js?sf_id=4068334 HTTP/1.1\r\nHost: b.sf-syn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 28 Mar 2026 11:27:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 14\r\nserver: cloudflare\r\ncache-control: public, max-age=14400\r\npragma: no-cache\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()\r\nfeature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'; form-action 'self' lists.sourceforge.net aistudio.google.com; script-src 'self' *.licdn.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.cloudflareinsights.com *.google-analytics.com *.tiny.cloud *.recaptcha.net recaptcha.net *.gstatic.com *.googletagservices.com *.googlesyndication.com *.doubleclick.net *.googletagmanager.com *.consentmanager.net *.microsofttranslator.com translate.googleapis.com translate.google.cn *.gstatic.cn *.tds.bid esm.sh blob: *.adnxs.com *.bing.com *.slashdotmedia.com ml314.com j.6sc.co *.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net js.usemessages.com fe.sitedataprocessing.com a.usbrowserspeed.com d-code.liadm.com frontend.id-visitors.com *.identitymatrix.ai 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-src 'self' a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googletagmanager.com *.doubleclick.net *.gstatic.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net player.twitch.tv app.hubspot.com; fenced-frame-src https:; object-src 'none'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; script-src-attr 'unsafe-hashes' 'sha256-4d6SN0yYeMqJ0cKMQtg6WeJWMAytzagOyddgGs8IrQg=' 'sha256-tBDVzvq7nAZRA5cnijB1/8uEyvj+5hEDBhcx7F72AGE=' 'report-sample'\r\nset-cookie: VISITOR=e813417d-d788-4fb3-b305-67c145dc2f93; Max-Age=315360000; Path=/; expires=Tue, 25-Mar-2036 11:27:51 GMT; secure; HttpOnly\r\nx-content-type-options: nosniff\r\nexpires: Sat, 28 Mar 2026 15:27:51 GMT\r\ncf-cache-status: MISS\r\ncf-ray: 9e3649b7be8756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T09:07:10.188554Z","times_seen":17758850,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":34,"dns":6,"connect":1,"send":0,"wait":300,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moneroswapper.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 208192\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-07T09:07:39.072724Z","times_seen":254255,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":283,"dns":1,"connect":29,"send":0,"wait":27,"receive":7,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moneroswapper.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 208192\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-07T09:07:39.072724Z","times_seen":254255,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":143,"dns":1,"connect":31,"send":0,"wait":28,"receive":38,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fmoneroswapper.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2060435565.1774697271\u0026dt=Buy%20%26%20Sell%20Monero%20Anonymously%20%7C%20No%20KYC%20Exchange%20%7C%20MoneroSwapper\u0026auid=1860812301.1774697271\u0026navt=n\u0026npa=1\u0026gtm=45be63p1v9243443588za200zd9243443588xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468~117484252~118128923\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17948737756\u0026tid=AW-17948737756\u0026tft=1774697271247\u0026tfd=1324","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:38:24 GMT","end":"Mon, 01 Jun 2026 08:38:23 GMT"},"fingerprint":{"sha1":"B4:D8:FF:18:25:9D:F4:3C:81:14:15:FA:FE:F1:C9:D8:BD:9A:AC:DB","sha256":"DA:45:8E:4D:FC:26:D1:06:BC:7E:55:03:F6:AC:CD:D6:ED:2B:5B:91:E9:13:35:DF:B4:EF:95:A0:EF:55:E7:C6"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fmoneroswapper.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2060435565.1774697271\u0026dt=Buy%20%26%20Sell%20Monero%20Anonymously%20%7C%20No%20KYC%20Exchange%20%7C%20MoneroSwapper\u0026auid=1860812301.1774697271\u0026navt=n\u0026npa=1\u0026gtm=45be63p1v9243443588za200zd9243443588xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468~117484252~118128923\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17948737756\u0026tid=AW-17948737756\u0026tft=1774697271247\u0026tfd=1324 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\ndate: Sat, 28 Mar 2026 11:27:51 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T09:07:10.188554Z","times_seen":17758850,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":65,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneroswapper.com/assets/favicon.png","fqdn":"moneroswapper.com","domain":"moneroswapper.com","tld":"com"},"ip":{"addr":"64.23.177.219","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moneroswapper.com/","date":"2026-03-28T11:27:51.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneroswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 21:50:07 GMT","end":"Tue, 07 Apr 2026 21:50:06 GMT"},"fingerprint":{"sha1":"76:AF:AB:00:A6:FF:68:F4:AF:9D:FB:F3:D7:17:48:A6:20:5C:E7:6E","sha256":"3E:57:DC:49:02:84:9C:E6:E1:AC:5C:7D:2D:40:FE:41:EA:B6:D3:B1:7C:7F:B0:70:73:C1:63:AF:4D:BF:0E:C1"}}},"request":{"raw":"GET /assets/favicon.png HTTP/1.1\r\nHost: moneroswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moneroswapper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b0f833ef783e312abc656359eff6bfd1; _gcl_au=1.1.1860812301.1774697271\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 11:27:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Feb 2026 21:32:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6983bae5-997\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"33dcc1976dcd7d9518962db9b3517709","sha1":"89e2e714f5eb62596015e6847bea7f9c1d799740","sha256":"876837e9ed7af7bfc72ba8ba30528a374acb817611993d8d9d9322754ef49d65","sha512":"d1f078a096e3934620485af7b367edf965446ffc7bb73c57519c1e214d50348f3bbf1ac6f27accc8be418181de8f032d6a4b6b6891be4a63c1ea45df1b36bf56","ssdeep":"","tlshash":"d3512b4a70004d773a38042b463d761744f2bd3d4763964ba421f9683a762a30b2f1fd","first_seen":"2025-10-19T19:31:50.014033Z","last_seen":"2026-08-05T22:27:43.348536Z","times_seen":69,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"moneroswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}