{"report_id":"6808f80c-90d8-452f-86ba-37aba7fcc78b","version":6,"status":"done","tags":[],"date":"2025-09-02T04:29:07Z","url":{"schema":"https","addr":"uvnriswamp.cc/?swap=88","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"172.67.154.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"uvnriswamp.cc/?swap=88","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"title":"Uniswap | Trade Crypto on DeFi’s Leading Exchange"},"submit":{"url":{"schema":"https","addr":"uvnriswamp.cc/?swap=88","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"172.67.154.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-07T04:29:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":16,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":40210,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-02T04:28:47.591440+0000\",\"flow_id\":570128764758689,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":40210,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-09-02T04:28:47.584353+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":38766,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-02T04:28:47.597697+0000\",\"flow_id\":1986289003856874,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":38766,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-09-02T04:28:47.590826+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":48234,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.614238+0000\",\"flow_id\":666565812894586,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":48234,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-09-02T04:28:47.605050+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":48240,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.629497+0000\",\"flow_id\":1978944609803922,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":48240,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-09-02T04:28:47.614034+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":57020,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-02T04:28:47.665474+0000\",\"flow_id\":729650292538492,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":57020,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-02T04:28:47.605308+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":57036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-02T04:28:47.684754+0000\",\"flow_id\":2188059309578,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":57036,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-02T04:28:47.620042+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":39050,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-09-02T04:28:47.866281+0000\",\"flow_id\":1492144426522891,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":39050,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3510,\"start\":\"2025-09-02T04:28:47.858379+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":38712,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-09-02T04:28:47.870777+0000\",\"flow_id\":589604293914654,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":38712,\"dest_ip\":\"104.18.10.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3510,\"start\":\"2025-09-02T04:28:47.864286+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58028,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.951055+0000\",\"flow_id\":859789949134443,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58028,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.910955+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58054,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.955454+0000\",\"flow_id\":2038913090709368,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58054,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.911224+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58042,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.958048+0000\",\"flow_id\":1713927947806450,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58042,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.911090+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58012,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.959420+0000\",\"flow_id\":1715287304955261,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58012,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.910717+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"54.217.177.200","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":33742,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-02T04:28:48.472305+0000\",\"flow_id\":2214751199307521,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33742,\"dest_ip\":\"54.217.177.200\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.403201+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"52.214.77.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":46812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-02T04:28:48.475002+0000\",\"flow_id\":1250904703510546,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":46812,\"dest_ip\":\"52.214.77.216\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.403474+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"52.214.77.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":46826,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-02T04:28:48.486643+0000\",\"flow_id\":2220583764910984,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":46826,\"dest_ip\":\"52.214.77.216\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.418696+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"54.217.177.200","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":33748,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-02T04:28:48.490284+0000\",\"flow_id\":960889184348024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33748,\"dest_ip\":\"54.217.177.200\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.419704+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"1rpc.io","ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2025-08-31T11:45:39.005394Z","alert_count":0,"request_count":2,"received_data":6932,"sent_data":989,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-27T15:20:49.600294Z","alert_count":0,"request_count":2,"received_data":798857,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"uvnriswamp.cc","ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":34,"request_count":34,"received_data":6874321,"sent_data":15179,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2025-08-29T07:03:21.42272Z","alert_count":0,"request_count":4,"received_data":2810,"sent_data":1998,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc.meowrpc.com","ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":3113385,"first_seen":"2023-07-10T08:36:27Z","last_seen":"2025-09-01T18:05:29.197164Z","alert_count":0,"request_count":1,"received_data":974,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-08-27T23:37:17.518462Z","alert_count":0,"request_count":2,"received_data":935,"sent_data":854,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":2964008,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2025-08-31T15:59:12.950617Z","alert_count":0,"request_count":4,"received_data":2626,"sent_data":1984,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.nodereal.io","ip":{"addr":"54.217.177.200","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-07-19","domain_rank":1804985,"first_seen":"2022-10-20T10:44:48Z","last_seen":"2025-08-26T20:16:28.821269Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1007,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"52.214.77.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2025-09-01T23:49:31.442577Z","alert_count":0,"request_count":2,"received_data":5971,"sent_data":1021,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":40210,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-02T04:28:47.591440+0000\",\"flow_id\":570128764758689,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":40210,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-09-02T04:28:47.584353+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":38766,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-02T04:28:47.597697+0000\",\"flow_id\":1986289003856874,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":38766,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-09-02T04:28:47.590826+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":48234,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.614238+0000\",\"flow_id\":666565812894586,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":48234,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-09-02T04:28:47.605050+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":48240,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.629497+0000\",\"flow_id\":1978944609803922,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":48240,\"dest_ip\":\"172.67.70.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-09-02T04:28:47.614034+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":57020,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-02T04:28:47.665474+0000\",\"flow_id\":729650292538492,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":57020,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-02T04:28:47.605308+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":57036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2025-09-02T04:28:47.684754+0000\",\"flow_id\":2188059309578,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":57036,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3435,\"start\":\"2025-09-02T04:28:47.620042+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":39050,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-09-02T04:28:47.866281+0000\",\"flow_id\":1492144426522891,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":39050,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3510,\"start\":\"2025-09-02T04:28:47.858379+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.11","port":38712,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-09-02T04:28:47.870777+0000\",\"flow_id\":589604293914654,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":38712,\"dest_ip\":\"104.18.10.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3510,\"start\":\"2025-09-02T04:28:47.864286+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58028,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.951055+0000\",\"flow_id\":859789949134443,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58028,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.910955+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58054,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.955454+0000\",\"flow_id\":2038913090709368,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58054,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.911224+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58042,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.958048+0000\",\"flow_id\":1713927947806450,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58042,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.911090+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:47Z","timestamp":1756787327,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":58012,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-09-02T04:28:47.959420+0000\",\"flow_id\":1715287304955261,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":58012,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-09-02T04:28:47.910717+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"54.217.177.200","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":33742,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-02T04:28:48.472305+0000\",\"flow_id\":2214751199307521,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33742,\"dest_ip\":\"54.217.177.200\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.403201+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"52.214.77.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":46812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-02T04:28:48.475002+0000\",\"flow_id\":1250904703510546,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":46812,\"dest_ip\":\"52.214.77.216\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.403474+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"52.214.77.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":46826,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-02T04:28:48.486643+0000\",\"flow_id\":2220583764910984,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":46826,\"dest_ip\":\"52.214.77.216\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.418696+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-02T04:28:48Z","timestamp":1756787328,"ip_dst":{"addr":"54.217.177.200","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.11","port":33748,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-02T04:28:48.490284+0000\",\"flow_id\":960889184348024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33748,\"dest_ip\":\"54.217.177.200\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-02T04:28:48.419704+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-11T11:09:50.344324Z","times_seen":31895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/4fcf6a1a-64c6-4312-9667-8d6cb3ca5163","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/8d174f9e-45de-4926-b6e0-101263a30c83","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2b6b1c63eabdd942a229f55acb3bb8d","sha1":"a4a5aa354899136ac8e59348318f9aae86ae20ac","sha256":"e068cc0c17db2d262bd2751b69b2b5bb5047d93e75c2c9062a0e2ff4e6d68f5c","sha512":"f545043e17cb63da232615076a7254203337e749ae663ba2be1b23c5e42b8eeb662c3803defaac8d36cd18db8089e387adcd26113f8884c58a71e81ed6309824","ssdeep":"24576:ymStrTh4auKw/I96XleOh6XJiOdOVg05diIcmO9idAJ9:ydtr94auJwagcfSX","tlshash":"09263041c8134c508aa603ddc1ab4dc0d95023a2de596156f6afedfda70efe36cb24b6","size":4830578,"data":"","first_seen":"2025-09-02T04:29:16.862164Z","last_seen":"2025-09-02T04:29:16.862164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/?swap=88","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"744000caaeb077e00d3bfad6537f6e3c","sha1":"08235c0028ef1f5bf83be7c36a75829d2bb987b6","sha256":"ec77b32fe61c048f738a2797a8206f5ca5d4e50ea170ede029d15babca4aec69","sha512":"c8047dc771cbc6ffa9a7884b88516a64724673f69d487c36ec775359fa74362d25bda0177115e61074927ecbcabc5e1245339793b12e2339820bfd4006fe2079","ssdeep":"","tlshash":"94f02074f8f164b00a0871a26e2ed5143d3300d8908ea74471680e7d7e9223cc7a1e85","size":442,"data":"","first_seen":"2025-09-02T04:29:16.864622Z","last_seen":"2025-09-17T16:28:23.119841Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/?swap=88","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-12T11:39:06.916867Z","times_seen":742173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/?swap=88","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-12T11:11:38.819039Z","times_seen":237617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/b07c8fe9-d562-4db3-bfbf-3a7406f79d80","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-09T15:35:30.742787Z","times_seen":4177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uvnriswamp.cc/img/uni.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/uni.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 29535\r\nlast-modified: Tue, 02 Sep 2025 01:11:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64431-735f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yxSkqoyxJCnEYDGtCwkj1MTrzHZ2Mx5ETG8S8yvwvtbrB1inSkrvf%2FWwAKjgZQ2ybLFqMAjuvknENd%2F0%2BHsw9V2cVXsQSMfHOeK\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd8a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"77e75417ed8c7c5aca51a5369f42f866","sha1":"013879d818ab50e5f6852bf6b1244e9b79b2966b","sha256":"e26cda269d5fbdd8e1bdbd101eb709af78d00d078a014379d6f3512c1a920099","sha512":"74779e61409600f2dc93dacd5c67ed027280edb583f04a391e63e9fb953a6927b9c19999ad905f18e9860d8604f7d7ed3eddcbef96da6c55ecf98f4beba1f8b0","ssdeep":"768:r2bR+pfpsNBM5rdb8YA0GnKOMbBA+DUzax4xwl8MtTjZs4:CbROfpsNOAb9cBR4zP2htfp","tlshash":"30d2e1da87c41eb641170a7a818d2c60e1326bec896e5725fc9d380a4f83b519ad7f4b","first_seen":"2023-10-18T06:53:31Z","last_seen":"2026-08-09T10:09:42.941611Z","times_seen":730,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/512.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/512.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 386611\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-5e633\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXN33hTRoYaLFQ4wxjfftf4KwW1wLTBpUGxGMa3L4lcc9XU9zLgNVqlo4mhNcCGm%2FAhWZLLD6ObvwnKuRgHPFenqyaJGHJ%2FCewXM\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43377e1e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"87e1ff3cd8b01195164e4a54807468a0","sha1":"c00846cd185ce838814895d9db4e10cfa5339996","sha256":"814824e1f29a34016526c9a1005799fafd1c0cfdd2a456e7485743a83b37b949","sha512":"873121a6ce08fb4a9821db08d624b1294e383b02b75776368840a39e478bd40ef468373399641119019c56b8b9114d20459d40ef34de685a9d2bff97eb53fe19","ssdeep":"6144:c+qZ1293LH0m9Q4cVh+c6iYv8nD6vwoPN5gwce9c8qH0vG//8QE1s:Vqn2Qma4cV4cXY0nD6vw25OHH0e/kQP","tlshash":"018423e523a8f16f51273f660fad2328857a2d348394ba1a07b1fddc6ec38051d436a2","first_seen":"2023-05-01T16:05:20Z","last_seen":"2026-08-12T09:54:06.921209Z","times_seen":2424,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-08-12T05:12:36.068995Z","times_seen":3040,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\ncontent-type: application/json\r\nContent-Length: 60\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-trace-id: 8e92cfec0683f41a0172bbdec090d160\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 978a4341695756b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5463134c0ea86caaf7b16dc5d234236","sha1":"89c5acabcfef0bd597c5636b409d7bd24b6237c9","sha256":"d1f6939d4458dcac5d59e2cecec56cc8cb6ba730d2f54639f7824404f801d57e","sha512":"1c1022e76aca5ebc34b5a300285110e4a50b35f3442ad8ef78bf5fdd98243887ab33691843f761ca64e39b09f0fa961a2d2040d9a9f83816c2cbe94af985fa48","ssdeep":"","tlshash":"da9004c15d070731451c0c41d404015130c3374c05041f04540f4540705c147534c31d","first_seen":"2025-05-04T14:51:03.899344Z","last_seen":"2026-06-03T16:15:21.762262Z","times_seen":104,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/54f860d2-c5890eb15de7.min.js","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /54f860d2-c5890eb15de7.min.js HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Sep 2025 01:11:12 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b64430-4f14e3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZuhoraL8oLj0uEACQP3BXjTHL3QAsaJpG%2FphGRa8BrTZZ0QEx87ZMCP71t7iWWreWS06hQffbwxSrhO6i%2Bk37M8w3YIKbx24MxX\"}]}\r\ncf-ray: 978a431aed835693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5182691,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fbe481b33adc0be38d6db9d35fe0ca66","sha1":"d344f1fa20a8f7ada69b4feaee5c4d84d993cbf3","sha256":"92ce578cd03b3103b165ef416b3d19cae60fc773bd72e0f195038241b0f3bb1f","sha512":"108a841dc7e447ae49b63e4719dd66bac51721a93ad405995744892886e4935d27b7ab654f797441145add43b93880cd57246d835eceba67728191173ac4df8d","ssdeep":"12288:a29HPFc7T1XUQPG77JDf3JJ+lXx5PMiaKGC4cPac6Rir5lLqZ3vj/yD0Wj2UzcZE:a4HwcN3sdVAO9Air50Zw0EkkrymiI","tlshash":"2f2512d3a863f0d25615c8b478e64de9bc1a805edeeb07f27e0cde40b0954e8c6d89d2","first_seen":"2025-09-02T04:29:16.818733Z","last_seen":"2025-09-02T04:29:16.818733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/eth.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/eth.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 5731\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-1663\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYXFrUTgOO8RBD1uheQLQgZDSMVkLhvKNL4R4%2BKz9STXx%2BjFdKsnLQTIAhf9LJfII%2FOODSPgvfoX2YPFBCEeWVMkDrrFt3dfiVGq\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431aed855693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"c8761e3fce3fc4d4a5af20afcd2bc017","sha1":"c6174dcb72edd8c6a666d3a24af3839fbd81c49b","sha256":"b5584df7563d0d4cda477390e834a776e2aa8137b0a764ab5378d16802dab26a","sha512":"0ee2ca2c7f50d466595c9490ca7d63ce283ff3754f78da66c3d407e91673c045d04af4acb677fc034f89ff5ce08db48d99879469c8cbec78ebd36e2fbb5b6f53","ssdeep":"96:B3jTJLHDwP6FtBm7HNL9rTsl+P7yHzCZbLb/B9DH/XXjWerct3VNqr/9Tlder1Z5:phyvxsluMAjDfXXjETsrVTa1Z5","tlshash":"cbc19e4d28e90fccea8049b18120c2d4cd6663a93f769c956bc95814e7be170cdf9bd0","first_seen":"2024-12-01T12:07:21.275378Z","last_seen":"2026-07-22T16:36:08.934435Z","times_seen":343,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/lido.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/lido.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 51381\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-c8b5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58FcnOTGTRrFjRBQmfj1MA%2FIXtlbtxyOiAfKbD20Se308FWLW%2FQ%2FMFxOZ%2FXSlx3Q%2FzwVh%2BTzaePhttdgocBAUMA9AGe8zYw1PgBi\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd8b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"b6214cb831273513cc74f07a2ea18b48","sha1":"dfa6cfd83d35a18c313622aaaa1c4c6406e84977","sha256":"bd4586f824e10165cfb95019fc7162ed3aed478ab1db639dade115f9dc610ba7","sha512":"f944a76623499fb81000f1574a9b0eba9069b59399828f822f402e67cf8c30d9569dcdd68d011c9f40da968107a53452be155a169ec84673e999ddc7d8fe0e7e","ssdeep":"1536:m6dGcNYsUpMdKXYLMSZOtagt6Umn89Ip8f4/:mWGcdU+HLMtagtYwf4/","tlshash":"73330274f8a7035f6b5785145f2de99b6277a37a1033c9a604920b5ce32374ae96f201","first_seen":"2024-08-07T11:28:42Z","last_seen":"2026-07-23T06:21:10.026139Z","times_seen":322,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/shiba.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/shiba.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 18226\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-4732\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6D9HGu8eIMpeUbqriApvLav09lz8%2FlFJqmZAPh%2Bdozfoa6Yp533vUP9L8HbLAzxVaHA6k%2BKRDd8tMc8aTC8J5R%2Bv7wNc8aTZKTVc\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43355e085693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 245 x 250, 8-bit/color RGBA, non-interlaced","md5":"545b7362a2937dc583c8a98c6165d349","sha1":"445685e512403256ecfffd4b16f2156d13cf39ae","sha256":"4f655046ceab0e1d4cf2bff7ce67dff0f88a19be78f2a5fa6ea4df974a4d9ab0","sha512":"19a34ef3c1f184f0bc088c475009c777ffdd37473d92be0fe48a2820e6fac418608681b9def65efd2af20c4e858bfe843ae8c99eac6a9cd5fc378b33479c47e4","ssdeep":"384:8C46bAi+c9YgJFViVx8/hat7NlhT5sj92eMZcWsAqaFSrtgzi:vZ/J9Ygcsktxe0cwYgu","tlshash":"5382e0239a3abd61265eab6f973119fb034bf5da40cae76813f840dbc1311e44439cb2","first_seen":"2023-09-22T03:47:32Z","last_seen":"2026-08-12T09:54:06.955799Z","times_seen":399,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"54.217.177.200","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:91:90:0D:EE:3C:8C:8F:95:A6:0A:58:6A:D8:9E:F9:06:B3:FD:A5","sha256":"CD:EE:48:FB:10:6F:A2:00:C1:73:D1:C9:53:62:65:8E:93:C6:CF:DC:73:96:A6:33:D8:E9:26:3D:88:32:2B:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 316fe68ce27d26c222b120e40239b038\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/meme.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/meme.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 59097\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-e6d9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJPN73X1arabPAy5TOOID%2BEQtHtR2OrWCen9flNkK%2BMKHX%2FUXViedkgAYhmb0KliWOHVvcAbIGhUc0yJiqBWZ3XGbOGbxmNE3Smz\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43354e075693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59097,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"92883104c8e598abfa1ce65f696558cf","sha1":"f9d41ab8fb7ef64a7c886c85c504fca9738fb930","sha256":"161855015d0324bad79af26ac0366206709427952354648f28ffa944150118af","sha512":"76c02c146a0c6080dae80b2c65995b8675acc5a7d58de714f4949a2dba0d16e8812bd31def9e6cc74b717881b7f1bfaa2cb8e22bd104d9513fa881b9cb575a1e","ssdeep":"1536:fW7YReBgUHlcReev6xcZxGjmSwPMnaKljFxbGK02m:fW7YReuUHlcTv8cZxGyFPADNbQ2m","tlshash":"7543f18c114f22d5ed38c071b31a9a889c5857aea33edf811e99bdcdb4099456cbf918","first_seen":"2023-06-17T17:36:13Z","last_seen":"2026-08-12T09:54:07.059947Z","times_seen":410,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/secureproxy.php?e=ping_proxy","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:47 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lv8BlyzXclMw1mIcnRHIuzaUZ6wI9GpYY7Yjhsf72zz7SgJbqwYy1GV4Tj4se6hmx9fktIfPNk3P7gx1YBEZW41wLOMWFVxMYocY\"}]}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978a433d6e2b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-12T08:55:27.444121Z","times_seen":9035,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.214.77.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":153,"dns":43,"connect":36,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.214.77.216","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: f12fd3aba9ce81ad729378e9744ed35c\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/api.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/api.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 13105\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-3331\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32Um1Pu7tdpMSN55R6OqfFIDYYHG6A4zba5wh3333ZhijdAM9ydaQskUNK74x2sCA8oJx%2FHlvUd8ew9dSPjNGVGonJ4BMcxj02oH\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd8d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 632 x 340, 8-bit/color RGBA, non-interlaced","md5":"df7e9572c8b83afd6ec77ded30de6879","sha1":"981a48f3ddf8c6413e29573b3e9499eb9260dc71","sha256":"15d531948e730505a3215f86718abf5425f9d7513912dd479996bd62375aa979","sha512":"c315c998a4fe670de9de5842455228b7930ba13152d0ec8ec3bdec3042edf93e5f57972e3c3864248a0f5c266f6e6e9f1d1e6024fa896357c232072d1dd017bb","ssdeep":"192:fGGDCCDjocgknNX8Qqe289YNhad88tNXGAbWWZ6DXq12pVuuittJKyUtrXbjERzw:uGPIe8QpJQEptNGWZ6zzpVsFKysXb6Fc","tlshash":"41425ca7d889308f48154a1d6bc378d9e2760ab3361c6f1f5fa5a5b20c2b2d5f1b2c1d","first_seen":"2025-08-30T16:33:02.612865Z","last_seen":"2026-06-16T02:15:33.759255Z","times_seen":157,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/euro.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/euro.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 9890\r\nlast-modified: Tue, 02 Sep 2025 01:11:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64431-26a2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2LnH30aGUAtxRps1QPQ7HXafdxNKDQ6P%2BvmDHnY5D4%2B0avuf2sgnwXCG8GkEnMkR2ogUYBHHHfhzzjh%2F2eyeSfBpeq%2FcRodh8%2BU\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43355e0f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b75cfcff6c91e443011489cf22a537ef","sha1":"fc4ba4ea1339deaef9ab49cd73c8c0c9e715d13a","sha256":"5937d1ec581330f33dfca842b5837f1e42bbbf2ff9dc14feed7af1ffd3a5ec9f","sha512":"60032ca5eaace4c529534645a407332c090a00b90837add5f12b428a7e8861fac212d34916b044bb53fa08d44144bbde4093d7a04557f4665840080b26e4a8cb","ssdeep":"192:qWM6xOAGtJLIzHK/IgR7N+tWfxPYqNonMbWsQVMsx0S:vML4zHK/H7N+tlqNUOS","tlshash":"7312bff573eee0e9d7849a5763a8a092a9111e937c55fe286bd8cb1cf6300901cad334","first_seen":"2024-03-17T17:43:08Z","last_seen":"2026-08-12T09:54:06.983231Z","times_seen":365,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":162,"dns":54,"connect":18,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 02 Sep 2025 04:28:47 GMT\r\ncf-ray: 978a433f486c56b5-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-08-12T05:12:36.068995Z","times_seen":3040,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/blur.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/blur.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 93331\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-16c93\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyPYb2oqgYl3Ttnh24KefgW7wN4ueVu%2Bl7Z0wv6EzAqZypXBPDMsEu4e%2Fh%2BPxNcdQjNVVyuGb3%2FIVeAQBve0W3ZzdxJnjKdBAMYn\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43356e115693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"52b20a8c7394bcd058d6441a018a6c1a","sha1":"5e379bc0dc371fb8bd716d2f37a5ec612fa5acea","sha256":"1d3e074e2799d124697f8e0ea99903fb3ad8e86dd5b97ff2a9da75cc14608abd","sha512":"8864ab68d6b194678fdab3af043c464299cc066522932775e71ed531ebd6e69283efe7c54ff41f60977b98c8ec8307fcabc6fbc26eb5f365a150d017738f5890","ssdeep":"1536:x4exiMeui8vG2mI6WklCOdUwH0+ohi8jczJzOmmkdK0gNGE8CoJTk:xPxem+IvXOdUwH0+o+OmZ4OCo2","tlshash":"ed93123f5165c6c044f39e8f4ff89e124619e65cca5777b2944c00c7da2abc272a89f6","first_seen":"2024-03-17T17:43:08Z","last_seen":"2026-08-06T03:35:35.571495Z","times_seen":312,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/pyramid.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/pyramid.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 8323\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-2083\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvVDjyA%2FN%2BZrEnnmLXKPNXNQU8SRCejOhJ6r%2BIZmVFz9csWwjZcLr0ac0wg7MznxUfaXvSf0XeaNqzf%2FUAHgG%2FUVkbbnL8rsXjk7\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43356e125693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"1daf4f0d02afd5015f1da5c451632087","sha1":"f6cd7f1ea4bf53335c555bc637831985bb68df2a","sha256":"85a7f2e4fcea23860e37a79fa93f6326c3cc825fce46fa44b0689baa02f058f5","sha512":"67a8ec4f83ce5acb3260e771a994710ad7f02a40b9f31e0b649eb14b8392d920afef105963cd99fc84685cf2881eeb8dd373a89e219e321b5fd415b13d0ba184","ssdeep":"192:piGsypVgX2EMxom1qgke1QkXNHXREN5RlRDW9s4jOX:wEg7VmshfkXNHS7RB","tlshash":"c502bfe5a3ad24139ee97db5b338e4034b1726417c9dd480f82e4f0a8430a6f45df912","first_seen":"2023-08-28T14:42:38Z","last_seen":"2026-08-09T10:09:42.919615Z","times_seen":382,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:47 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 978a433da988712a-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=732\u0026min_rtt=482\u0026rtt_var=346\u0026sent=10\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3634\u0026recv_bytes=1272\u0026delivery_rate=7898181\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=5b57cecfc6052ba5\u0026ts=169\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":34,"dns":1,"connect":1,"send":0,"wait":133,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.meowrpc.com/","fqdn":"bsc.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 05:00:46 GMT","end":"Mon, 10 Nov 2025 06:00:36 GMT"},"fingerprint":{"sha1":"AC:A3:E8:A5:00:3E:5F:57:94:DB:41:28:B3:C2:72:95:89:3E:DC:BC","sha256":"1F:6A:99:40:5C:1C:DF:4C:85:92:57:9B:70:77:3F:19:9F:5E:9B:8F:FB:AE:EC:68:66:EF:DF:07:20:6E:16:8F"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:47 GMT\r\ncontent-length: 0\r\ncf-ray: 978a433dbc8fb4eb-OSL\r\naccess-control-allow-headers: Content-Type, Authorization, DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: POST, OPTIONS, POST, GET, OPTIONS\r\naccess-control-allow-origin: *, *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Gg7Oef12Xi7BK2XbkxW3Q%2FT2vybCdG6pdBMqyvLaDkceA5M3TGGWg2oDR%2BRLkP10viv0mdrRjKhd92EgpDDsi7pkvvCZSd5Z3uJJGGVjU2f0pmJkC9Oe0H6hkgu8qcpCfQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=539\u0026min_rtt=439\u0026rtt_var=100\u0026sent=8\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3198\u0026recv_bytes=1147\u0026delivery_rate=7438356\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=626f2ef7f58a4f78\u0026ts=99\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":30,"dns":4,"connect":1,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":164,"dns":47,"connect":21,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 01:23:19 GMT","end":"Sun, 23 Nov 2025 01:23:18 GMT"},"fingerprint":{"sha1":"77:DD:9D:03:9A:8B:27:57:64:8B:DC:3F:84:87:56:2B:4C:AD:62:3C","sha256":"98:20:17:06:F7:B2:60:4B:A8:A1:AE:72:47:3C:9D:A4:FC:C0:39:C4:F7:3F:EA:8B:B3:19:01:4B:E6:61:CD:6A"}}},"request":{"raw":"POST /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 02 Sep 2025 04:28:47 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: https://uvnriswamp.cc\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":14,"connect":34,"send":0,"wait":32,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/wbtc.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/wbtc.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 33856\r\nlast-modified: Tue, 02 Sep 2025 01:11:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64431-8440\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=avzWMB0t%2B08DMca7ds5N%2FIf8cvPPvhDhxzKk1OaItykN54S2eNSYhXt9HUw47nuSczyWaatk1o5xqgDuL51xhKXgBLen4sv3G7h0\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd885693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4961beb6befdda1e13fe9693957f6602","sha1":"8ff27533f8b95daaad597ba4f90c9461d9057d14","sha256":"488ed9e5d7ca087193df45676173c580b2fb8b9fd40ab90619f910029cc1ae28","sha512":"17de15b18457e95c1fdaa235b29ba91d3f4c92422a3fc78f188b17b79e7681229c8338ab298696d33fe8b917484a6993e2ae57ab8cd7b8c2dc8ea8021e75f2e6","ssdeep":"768:CFrRpNm8eqvBT/en9zux/i2tuWLeRVd6j/h2p1vGh:CFrZDeqJT/enEx/itNRpZG","tlshash":"1ce2f1e325f382965c1ea601c71efacbe91ad21b657c3017a565fc8f4082ddf3a1409b","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-08-12T09:54:07.05894Z","times_seen":603,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/polygon.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/polygon.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 8961\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-2301\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqNeznpDQ%2B%2BSPN4YRfbvWMuluRqTI5elkZSjMiSLHOEPeoqW9W3WQXDD1by2Zx%2F1VYUSVu92xnRdi6JT8jyYg%2BHQGw62PCriY3S6\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43355e0a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"adbc6ade45395dcada8d4b6362396f5a","sha1":"ead4877f5b40a9515d6dee7325403037464fcb84","sha256":"4ec7314859d8f24e680372a6584968d4ea2b0dba1a7c7dc32ccc2be6fa6883a6","sha512":"c47dc4d65497c0e220aaebf87f0edc9233becede4f4e8090ff7197627f3823d059a5f34f54b272018bbd35d867790f47e04b3c2765e733c2b3ad33519e9ed65d","ssdeep":"192:0toxw1G92GxIdnUvqXu7/wCq3AgD85NqPX3l4HLGIvlxkrh:JwGxISb74CqrDkeqvlxmh","tlshash":"7702af88c098375d6df36c3111e6b514977fba270bc83daa511fdf0ea4461c894e6a42","first_seen":"2023-05-16T12:20:21Z","last_seen":"2026-08-12T09:54:06.990715Z","times_seen":279,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/layer.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/layer.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 13602\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-3522\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYXC5ef2kuKCzjkd32RgamW2uitmmH%2BibNgSWGLV%2BAJEQibqhf4xdrLyQRFGzDc2fL%2Bk5RQfv2FiQ4oUYKuDTUuFIB%2BkIdYbO0P8\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43356e105693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f8da792729856b00e8c2d8ae4c9079e2","sha1":"1b8c6f190b7968744753fe4e1602a2d94ea9e7c2","sha256":"f69a1f18629ccfffbc35fa5db02273d96cfce301c5912ae7a5248c6a5c961e9b","sha512":"6c2339d07db0256628f0cb9f35749fc90a73df2f49d219285a06450411fd11938de74af4314209e5687510fb69dc31400d41c96f2bf4e7e4d9ce89e2a459f828","ssdeep":"192:SGGQ6/tWdls2y3NGGFOrO+dBL2+TDEpjxNThnhmcWZubW+bKjWTBKhHZ:pGQ6QXs2WG8wOYBzUHGUFbKjiBKh5","tlshash":"ea52d0f43aa9ccd4c28e168a4e030204b16b8cfb5d3ec7c6f9818449ed5e7ca8554be3","first_seen":"2023-05-12T13:39:04Z","last_seen":"2026-08-09T10:09:42.923594Z","times_seen":395,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/oly.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/oly.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 5892\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-1704\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEJG%2BjX2tXSEPxxBWmbX6jL5Tbe9e1Tp6SmfHQcpoRm2%2F3MhaplPRQXNnPLQWGEC2AJSEFnn1sVCTAbAqKB%2BhDKutcsMK%2BZMYiU5\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43356e155693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5892,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3","md5":"47d61f9d7dd491b2f534e74dd87bc561","sha1":"b2fa8fdaed0bbc67a4dac4c964bd4c7497614c32","sha256":"acaa5d7f5438d6bbb03986cfac8c4727f092c3a5330c1b37f79e5072fcf3b677","sha512":"5776dc3aa14d8efe2209eb281cd4a08c7da083c97423244ea8daef5ccd4d9f6a81898bb73e2153da1492bdff914032ed6efddc8d59bfd2818491675c9bf5e217","ssdeep":"96:X894vw/sLbbb+GCySbbgyxpbbV+mHAIL19D+oUMVvLYsDjLH/B9N0yW:sFsLbbbSBbbgapbbLA+9zvLYkT/i","tlshash":"ccc12a271e138636f41ca9715bc0332d80591a258bc36b348c7c23bfb3bd1572c42da6","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-08-09T10:09:42.836751Z","times_seen":314,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/curve.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/curve.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 16821\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-41b5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7de8M62T7Rh4wT%2B2j0FzionuUZSj0a4sN7QBtAbaWL6Jeb12Cs%2BiQgLzBC%2BcyzJTapEYK7ig6Fd4dQV4ogZ%2BWAJv8yNlQGzGZYO\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43354e065693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"86121870cff072b86d09b08f6ff027d7","sha1":"3a06d97c7e8e1c0569acbc9e34f5e7d12d6c8d91","sha256":"8fc8782e9c8b6a814213dce8176c9c5fddb080bdf8288f824f9e579051890fb1","sha512":"0707522c3180480a3811ff89f6f4dfc1122f98d38f166ec499503cebfe79938ce5f2c38a16c8cddf1f0cacf09e5cf8ec170cbb525edee47edcbf7c821af23a0f","ssdeep":"384:bXmcpBuy8+en6b04md+DDPM8Nl7KNWeV6PabJn/nNK:bBpBu9+ey0/dSDuos6ybZ/NK","tlshash":"8772d0a642c853043419ff7e8fbe2f940244904e335ee69cd7ee85ce386a8a5d044f9b","first_seen":"2023-07-08T21:25:30Z","last_seen":"2026-08-12T09:54:06.914622Z","times_seen":393,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/aave.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/aave.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 46710\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-b676\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vli6GN6PJZBmJe%2FtU4%2B%2FnOy7ZZTxC6VZFMmjD8ZZ4A9xp8biKDboF0h80cNdHTI3ND8lUbDhgaQEbQu3MbKX0eiFoJC2a4sZwX9\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43353e055693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"98c63bb299803022a18ed616c7c8a8e9","sha1":"513fd01f839aa4ed05a51241623aa38ede683180","sha256":"22f5b3efbdb6032c76456b77e294183cadc69c53672d9517cb78a6b79c662c11","sha512":"b480206ffea1cae84717b39bbd5fa3f53c3a5b0d563af2ef58485433df236680ff1be9e55a6a932a158ba3d3472ada70d45b55ac01e25aec4a4061e22671b8ff","ssdeep":"768:hWfl5/JziAIwMVski6CeIn31ku6D89mTrXMVJDSmNJkAZWXLrg6SbUboAqfrlr8I:haziAIZWT7eInGzQArXy2mA4Uw6DoBBz","tlshash":"7323023bf0ca6e19cd65f1393a040814b86bf4a32187d56ce7add1ae0c4cd3ed86a59d","first_seen":"2023-10-18T06:53:32Z","last_seen":"2026-08-12T09:54:07.028444Z","times_seen":419,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 978a433c38cf569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 325922\r\nexpires: Sun, 23 Aug 2026 04:28:47 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zSHtuMzB4QPX%2BqFkuRFtce51hQgpew2wMhHTHBGQoKKUisd0EF%2B073iQgeCtIjMvuiCmFaPtaNA9nYxoROSf5QSAgkC3OI4efq52HOLYP%2FtZdqTOG7l%2FYo3qzL8vXMV%2FJ1ETsZUQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"54.217.177.200","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:91:90:0D:EE:3C:8C:8F:95:A6:0A:58:6A:D8:9E:F9:06:B3:FD:A5","sha256":"CD:EE:48:FB:10:6F:A2:00:C1:73:D1:C9:53:62:65:8E:93:C6:CF:DC:73:96:A6:33:D8:E9:26:3D:88:32:2B:E9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":149,"dns":42,"connect":34,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/usdc.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/usdc.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 9276\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-243c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUj%2FLOiV6hRoj2RxxgHbHx%2BjUd%2FyXjR%2BS%2BzCHjDdKDYX%2FO8DJ3cpvH7doe1p9b%2Ba0BUJC23Toes25n6KJUydQUXeJiCp1JiRRDlc\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd865693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 181, 8-bit/color RGBA, non-interlaced","md5":"bb400a72232101f48b1a16e52ab18fda","sha1":"25ee99942134fca6167e3beefcd377443ce1273e","sha256":"6d14601d0b1109046e366592b8c0f256ffb075f69180b65dddd97ae665d49f9e","sha512":"86479d8136144517d960978e01640b6f935b1056297846f5e2e136e5f37b671054aa067e9fce793db0f7eebb8b7fd420f3ec5be89dca41baa6e695ead9e8e500","ssdeep":"192:Yj9GF6d6C44reHkPWsuT3skx6kY+ur1GtuoPVS3OgmgHCNEZsK:Yjwsd6n4qwWsxw6C2AMoMOgmgiNI","tlshash":"de12af851657c48d77302a070e062be6337c02264b5bd368badb85a7bd43a25e63df47","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-08-12T09:54:06.988715Z","times_seen":1583,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/eth2.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/eth2.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2984\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-ba8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwfEARqEygzc7%2Fbg436tRftZg7IPZWIVxuEHTy8vj05Gm%2FlUTOvekgeohprN%2FaiX%2BL2vK%2B8WjyclvWXE8J9ewihY7tUfRlKcMk9h\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd895693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"2214386a20472bc5fba9309f1a90645f","sha1":"f94e58b4bc1a36eabd8e3ed962677d467e2d25bc","sha256":"c253d7c5d4203783e31bde1d33e143f6a9ce1defac24ab5e06948847696b80a1","sha512":"aaacd623488dabe41c1d5fe0424fdc1d7a482c45ef7c3568ae2aedea576a9f668529eb02ef3fdae31d3298cd2e895d19e951d31a08042714c9ba0b6f28b5f7e3","ssdeep":"","tlshash":"05513a665172494ed6f27c3bebb89b26ddcc5c7810992ea24153b076bb347c0e483435","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-08-11T03:12:31.179231Z","times_seen":969,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/liquidity.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/liquidity.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 47803\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-babb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oKuoPQSnz5AYajJvLv5ooeHl78GgArQt8Icm5FmZBg4CVIRovv5Td6hoZJ0qFlNnS53coIS4eHEwfz5OQ77CdoQvQTljv8nuan1\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd8e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47803,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 632 x 340, 8-bit/color RGBA, non-interlaced","md5":"f7e3e20c8a6f90ea9d2c387e25ace5dc","sha1":"4a2baed4a0a947eeace281bc263ff4ed12ad2dc6","sha256":"f996d93c5901d82c23a0d5d584a82703320dd303114b6c845fb4a8c6ee41dd7e","sha512":"9d13ae4dca81fc57babd151bc2790432a12ab4ea7ab04fdefdfd96935436786504c8ba4a2525a9b42f18858d0d1ce570b10b0f5af0cc132e29a95388d5efa23b","ssdeep":"768:kwVk4nV4KFzkQBPrHfiW6ppcq7WeaJ2PTakxbDDsqh59RQtr8Sz6efFu7Kxy8N:5ntFzNiW67c7J2mkh4tr8Sz6IdxdN","tlshash":"ad23e0bf5ac2ee03e5366ab37535c9bd236a34d0fa9915413aa60c893e095c87f504cb","first_seen":"2025-08-30T16:33:02.619075Z","last_seen":"2026-06-16T02:15:33.767042Z","times_seen":157,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/eos.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/eos.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 16013\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-3e8d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZY8cjal1qX%2FnT3bDX3qAcnVsaUrHjWBU3mD6ukCDuEJAcan9WUjDxN6%2FoCUg2R4opqu8JvTJavC60qWTV8j4f2hoSWQJyvYP%2FpH2\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43355e0e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"cc8995bc38a5c200c7c094ea37c18caa","sha1":"dd72029f9a9ce183e6e38d1993d808644b30c363","sha256":"3ae9c7df1ee8748d5766cb2a3b797b2eb49648f641f84612c453a6edfca99393","sha512":"6652ea9c870f5252180ef34ebac5928d02187ea3f715a3ccb49e52462c72cd9943ed67cdd011fa5597ab255321a0fa2b17e99105f7c338c3ef5aaf49576ad349","ssdeep":"384:151a8CoaQRmqTEdnq3C445KNRbtJGh3rVc0A0GQuSKquU82fOjftu:1hCojmqVC44kNRRJAVkZGH70Fu","tlshash":"8272cf391d4a8ea8e0996fc6237b3493cc944b1a0f6ba1230507b54fb3d5e19184acfe","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-08-09T10:09:42.896362Z","times_seen":347,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/chain.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/chain.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 21377\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-5381\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BR3AJ8oGvzau%2FV%2FS6PVe1Q0kOMls93JfPIRz%2BfyfjMAYMu7J6Po8Cdh%2BxHWEp18ZFB7rMV4HA2ebY1eWSy8SkDxjo8ep76xBEf6\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43356e165693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"2e823e2aef730eaf7e5890880654ff89","sha1":"1e001acd8e7508c5d9d24e167a97ef2a861ddb28","sha256":"c74a7e867400257c72027517b2816666c9a564be622cc6043345a51910cc3078","sha512":"7e8296ef4fa3a927b8218e0ae16039bd331195c15ef9e52ac0e6864c06a69e9c4c7d5adda6ed342d0683700ef934806739a84c582ef9e9b6625c974d93fa3797","ssdeep":"384:gGMtFAuwK03rjak5k7/WcKwmuszm8Lu+foiL87Ej11jUZjXDaG86OjydFTbISyje:gGsCfK03zkhKYsy8LuaoiL87WjSp86Ue","tlshash":"13a2e1475d2824418be2e3b52badf4d071ae9f501a1318c2ee4d762ae159ec1ccc72b5","first_seen":"2023-07-08T21:25:31Z","last_seen":"2026-08-12T09:54:07.01167Z","times_seen":440,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:47 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 978a433da986712a-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=697\u0026min_rtt=482\u0026rtt_var=367\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3268\u0026recv_bytes=1272\u0026delivery_rate=7898181\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=5b57cecfc6052ba5\u0026ts=152\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":41,"dns":1,"connect":1,"send":0,"wait":116,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/maste.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/maste.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2603\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-a2b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axZDTVAeDHVRuR50eHjbUayuSPdeCzZIk7BqAQt3C4%2B6TCXJNlxr7l1pr9wmfwvrGDTqaOAO%2BiQtwKSk%2BggCT0Dhw3MnpgMJsKx1\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43355e095693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f486c70ac032abd8d07f8ef8053b6c92","sha1":"a213404b5140683a9541186dbb64af637f8e19ab","sha256":"df526914090fafe0585f8cae603ee6885dbc2769d3cb4248b49262f0d2d53cb7","sha512":"020b19bae09c1cfc0d0aeca49391e236147110be6ce0377a4e9f3dd1629257d7aba055b3da251e57b9fc38fe2bc7796cdd7b8bc649ab6dceb8f43993067e1e96","ssdeep":"","tlshash":"a7513aee8ac1ddfeb667434903a5cc70803887270a71d96f3909d041687d926f053746","first_seen":"2023-11-01T00:48:01Z","last_seen":"2026-08-12T09:54:06.944955Z","times_seen":380,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 978a433b5f451ae6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 344466\r\nexpires: Sun, 23 Aug 2026 04:28:47 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sV5K2wM747VDHY6D1FR7NkY62tL99g%2BZU4vPchP16demFARZLWY%2BKKf91dIzWbQpOIh99AdDnVCerMBd2OnZyWDDR9tDP24f5YzC2v9Z44bSp1qFHZDKYQCR0bxSA%2BcKNfNgriVz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-11T11:09:50.344324Z","times_seen":31895,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":20,"dns":4,"connect":1,"send":0,"wait":11,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/css/main.css","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Sep 2025 01:11:12 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b64430-1e89e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMEYq0%2BcRjjFHDppsIpCBnoTAJicXNaItcvK4FIgzJZVwIVjxMZjj8CTRlV6YfIuVo4Tk1qcSfl%2Ft1ms%2FCWFOK5Tr9NDlnc1sFD%2F\"}]}\r\ncf-ray: 978a431aed845693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125086,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e830f276bde42cddc60f133248f68061","sha1":"b7864868b64ed3aeb34059ddd2e96e8d9f96914c","sha256":"f15c18684e06531c07379de7e82a9dadefd1d6299072edc706502702b1bf372d","sha512":"86a479848d19002520377bdba262bbd57c1e5c3b1bb37e89046598090e77ef1785c51a1614fc2eba75faf0823e36b823d6d7c55ffdf2bf06826635402647f067","ssdeep":"3072:xl5Hmr+SULaJDmdUvji9x9UXcsl4sFDzcmIJDmJji9x968y:xloULaJDmdUvji9x9UXcW91zcmIJDmJl","tlshash":"11c3d989a9a2736a17339f7fa7d10519fa74103b4e3132ac7ac819190fb61bb7071d8c","first_seen":"2025-08-30T16:33:02.599281Z","last_seen":"2025-09-18T23:28:25.259524Z","times_seen":36,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/ape.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/ape.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 17318\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-43a6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUiHaR8QVy3rGEcQ7Axx10tZo9tQIC3fMkviaT6ZMuYoYua2ZFvE0au066I86HXZl68ZUVxhJ4dTlp0zdgxa9fg4cx9fx0R5DIVa\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43356e145693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17318,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"57ebf93ae36214e88e8f3b306a3e5e77","sha1":"034f619c7de0127855b130df0ce41d97115ed6e5","sha256":"b15190409f28ef8cf96040716a717196f91a563f280c2650c42a8449798525bb","sha512":"32ec5f93ac2c5f6029fac811759eec80601554b6a82e2969b7c988dcccd9a000acf69665ed3db1893593cffdcdf4189a41cdf9bdbdcac5bd3ea58e9f3cd2daa2","ssdeep":"384:Q25K9JiiqA+pWoWWsrYir7IGo1XSn47qW+YB7:Q25K9Ji5A+pWoWRUi3/X4uq","tlshash":"8d72f1cdee7c945a4057327425af32c9d1cafca452d1ece99e4700065bfcbe6512243d","first_seen":"2023-11-01T00:48:01Z","last_seen":"2026-08-09T10:09:43.003682Z","times_seen":436,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:47.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 01:23:19 GMT","end":"Sun, 23 Nov 2025 01:23:18 GMT"},"fingerprint":{"sha1":"77:DD:9D:03:9A:8B:27:57:64:8B:DC:3F:84:87:56:2B:4C:AD:62:3C","sha256":"98:20:17:06:F7:B2:60:4B:A8:A1:AE:72:47:3C:9D:A4:FC:C0:39:C4:F7:3F:EA:8B:B3:19:01:4B:E6:61:CD:6A"}}},"request":{"raw":"OPTIONS /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AutomataGeode/0.1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\nContent-Length: 0\r\nDate: Tue, 02 Sep 2025 04:28:47 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":62,"dns":4,"connect":28,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/?swap=88","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-02T04:28:41.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /?swap=88 HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:41 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iItNT8ZSetlHMa31nLFnZVTOIJuZi8Kx8isLNZ8IE9rkxAc6K4hV0r1fgUUOPHs%2BwGf3vsz5jTPU2%2Fvplvnbm11uE5aC%2Fq2hAZYGb18%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 978a4318df82c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259196,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10951), with CRLF line terminators","md5":"855235f1d7f7cefca823d254d88b560b","sha1":"42deca0f0f7ba56caef71119729adda833d2385a","sha256":"434a56df24be387941e2c083c13e6fae48e379312037d475e456f90992241540","sha512":"83eb452546a7010f92a210a614a59d616eee4f0fa1358c92c380f36949e714591b47b0844569f6b2cde29d92894451e6183f84253212ff45cc575b4f3c28c3aa","ssdeep":"1536:qiCQZgcHevF+APaFbdIvzP5lP4dapa8xO/5SmMMUfpDffu:tHeveawdapaIO/5SmMT6","tlshash":"aa44e721e2d9a0994023974b95f0c76ce03e8d30af7b5b5af6707173a3cf8295d924e9","first_seen":"2025-09-02T04:29:16.848712Z","last_seen":"2025-09-02T04:29:16.848712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":20,"dns":4,"connect":1,"send":0,"wait":126,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/tether.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/tether.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 21909\r\nlast-modified: Tue, 02 Sep 2025 01:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64432-5595\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwKZeORS0616BchwXngP3TF6RrHaMzik%2FKQ9vJc%2FW7ecqgY%2F9o8FMOnvSmQtbLiYG2P4FHJ5ovcssiCJ%2BVcKdEYNCInfxBCeFL6o\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd875693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"88d6fe2e9f01143ea7e308af24c16a34","sha1":"8c350b8219206aab258d026b822da994b0c1a752","sha256":"1c2ecfc8c08a821a4839f2ae0df1d8796a8df233939b537b4e26514fa4f91196","sha512":"a44a19c6bc1974304723b8ac921b711c6c49ef42f95f75db0c1c6c0b8bf22fe066eefbf7dab05625525a53e439f39f1463a85baa22d32dc0f6f237fabd87de55","ssdeep":"384:klNl53tEgE8yQ+4qH4arOcw7KvD8+5M+VVAFDAmY48TPdLFYG/olwubBL:oNlEf8R+tYf7KvD8+5Msa9uDsvbx","tlshash":"d1a2e109616fb913b04fd01b8f6c449a7c253900872df01674a7747aa82fc17fd32728","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-08-12T09:54:06.973803Z","times_seen":1064,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/phone.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:42.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/phone.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 38432\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-9620\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcclnxOeq5PPmMnlMPgQFSMaQss%2BZlVZS8i5Y3wsnu4ZyzLdVwhLu4JbO%2FE%2FXc3IuIL7%2FuUpr2%2BltjX92aQlW5xccokOQbXRrZiM\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a431afd8c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 632 x 457, 8-bit/color RGBA, non-interlaced","md5":"2d405a71281c985939ee4920fac2e4fa","sha1":"7ff3100a5077522c929b10e7cd730ac5d0d4d0cc","sha256":"1d3e1dd40f4c36150501765cbfaac6e6bef82550b4f28e33d64a6cf1665775e9","sha512":"cc6114edc2224f09f84aa077d6aa0a56ed6e7e06766010a668ea0c6602f07f39a836d4679218615b39cd67b1e8065f05184475498061cc710f9a3cb008c5295b","ssdeep":"768:yM6vXh9M/GERT2MKubwWD6xXztlJwKBeljAAENS:y5v3MTT2MKqYxXzTJwKBQjAAEY","tlshash":"0403e1e32b5e31ed8d76f004510f22a3a9e6626389f7d4d435313d1831da28a9d73bb6","first_seen":"2025-08-30T16:33:02.622703Z","last_seen":"2026-06-16T02:15:33.770119Z","times_seen":159,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/noise-color.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/noise-color.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 44436\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-ad94\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLxn9UVo4%2F45ABpfv%2FDywGL72MbiQRidrds16Unp%2BortMfUrC%2FeTPw%2Bk0jtJqeo1ojMTaeq4Yt5wzt7HOZyw5%2BAENsr4T4t7wsD%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43353e045693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 122, 8-bit/color RGB, non-interlaced","md5":"3649826259be4160b55524eeebce11f4","sha1":"c8bc913d4d480afa6860ba05dd309718727bb0de","sha256":"6003b3233b7ccdb7fd5c479ca8edf17003f8b4abf440c231c3d11eb1b8cbbb5b","sha512":"e94f6a0e24d834a6e81cd2bb2202085a06a105bda7bf1f8e1c7e1eec37639d133c7ac9cf3f5b2178b643d30be99aee19f053ea40b2ae65aa011d297077e10886","ssdeep":"768:bD1uZnqcb5hlZZJ/aeFTmmVK08y0uMuWCp8f09VBLf3s2hFxcnMmPi2IUoBoPAnu:bQlTnZvjVKSLPWCp8fUBLf3thFxMM/Vc","tlshash":"9013f1bd114d87c3b72bd13a7f77655448f982c323ca5b4717864656f8a012009ae7bb","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-08-12T09:54:06.895917Z","times_seen":666,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/fonts/Basel-Grotesk-Book.woff2","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /fonts/Basel-Grotesk-Book.woff2 HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 94028\r\nlast-modified: Tue, 02 Sep 2025 01:11:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64431-16f4c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5r4zIkJKDhrXDZldI5DODecAV3Ou%2BsEIyPa6n0HewnqS3u93FCk2t%2FUqrrputAYylygt3AHDygFZupJ6dnIlfbW7OM9cKn08aENc\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43358e175693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 94028, version 1.327","md5":"87eae89ced6d8d61ba3a12d7222b9faa","sha1":"9eb5db96a7a8556ac2927a99bfc668ebc229dcc4","sha256":"453ff5217212a09f55acd96b891db5f1f7728b4d87d363931495579cb9eaf0ab","sha512":"d578c869fcf97543fbd9d7c4bf577083e0cd48a8b5a9216b47f3ae3dfed853692e9ae7983c47ab9e5e87f790732375e3781136f513bb5e2f48f5dd16cdee677e","ssdeep":"1536:4Iwl5NQFH4ZeX3+Xb95yMaDb7CzZmVdyyC7Oa8r1GUq3AVJpbBrO/lLJRN68LZmR:4ISfQFHQeHUDAPem28mQVJpt69LJt4Aw","tlshash":"8d93126fb640933b971dbe093443156184e63d3502fab14afe52f0eb64ab7c201ef819","first_seen":"2024-02-11T18:33:29Z","last_seen":"2026-08-12T09:54:07.030088Z","times_seen":1699,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://uvnriswamp.cc/\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\ncf-ray: 978a434048c956b5-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/img/whole.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /img/whole.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 17161\r\nlast-modified: Tue, 02 Sep 2025 01:11:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64433-4309\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gG3Abq6bWhc3fJsBgcXnfdffFMR26dDUyoOFuzHaz4EVs6R8Hw8p%2FdEkZRK5EQzC86Gv2CYFE12wHzYSPup0aDt8ZMfGdGoU2rEz\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43356e135693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"3597955d504ad2f825e23ea1db2e9b08","sha1":"6a011bd74f60c472117be7a7554fa00799c828dc","sha256":"4652c59b44f17e13a5cec8246ab3285cc951d4d70c4259cdc02ce65d93e07d1d","sha512":"713edce8b11f05431b3ee5431dbebeb955b05b12e4bae4f0fca10cd90f75ca9c81acfe6a866d830573f9f7a0fcd57fa201811a31d334e2380b287cc4e4e6334e","ssdeep":"384:L70PX8qRih051OXCu3AXWWIKswAiWJg9n8JJZaoRna0XUal2Mlw2:LQXs05EXCu3AGHCp9n89ao1aaMSz","tlshash":"0f72d0fb24886fd8c78cd838e7340474a190a5645a863a16777addf1106e9f48bd722d","first_seen":"2024-02-18T16:35:41Z","last_seen":"2026-08-07T01:33:04.882266Z","times_seen":386,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/fonts/Basel-Grotesk-Medium.woff","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /fonts/Basel-Grotesk-Medium.woff HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: font/woff\r\ncontent-length: 123112\r\nlast-modified: Tue, 02 Sep 2025 01:11:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b64431-1e0e8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eemCbuq7dwUcY9Zq92RCRVnwgbXrPDhCgSm5EIqt3ju5iBt8W0URAN4cEMMEKQUJQGtB8OQrvRNIATgBw0K5LQlf2mSfUGRXNiH8\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43358e185693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123112,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 123112, version 0.0","md5":"dab248e85acd4330225ef7976db2ae72","sha1":"db025c11dc989a18fa9f3e3706f2ccd406f262da","sha256":"d591c15eeed396b161cc97d2c6e140e274cabfbb9e456a78e3237bc0681e6fe6","sha512":"1c30a052de1e724fcd08fccb4784a4edf309d06c5edf979072ff4dd13274559ca04f9db1f61e17448e343bf7aa3b5fc0ff087d309b1b8907c2692694c558d938","ssdeep":"1536:ZsGt0DSVl5WQBMZgOPeYG3Ce+YINiRqGI3QHZrkRSU+nZ5ywDbXMXGkNZtw6uqIQ:KW3YLZgsY+ovIA5oRVgPlgNzw6uxXUd","tlshash":"2dc3128cd5f208cb9eab143d45864aa7db423612bc14ee4ea67ed25f83146d7e250cf3","first_seen":"2024-02-11T18:33:29Z","last_seen":"2026-06-16T02:15:33.768744Z","times_seen":312,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uvnriswamp.cc/favicon.png","fqdn":"uvnriswamp.cc","domain":"uvnriswamp.cc","tld":"cc"},"ip":{"addr":"104.21.80.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:46.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uvnriswamp.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 22:27:18 GMT","end":"Fri, 28 Nov 2025 23:26:00 GMT"},"fingerprint":{"sha1":"0D:FF:C4:EC:59:7F:5D:D5:EB:59:BE:7D:37:CD:1E:A3:E6:CD:30:8B","sha256":"43:95:5E:20:3A:9A:9A:81:22:2F:0F:78:56:B5:04:56:D3:92:9C:67:71:03:B3:5C:23:29:91:C4:F6:6D:52:5D"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: uvnriswamp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uvnriswamp.cc/?swap=88\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 04:28:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 28170\r\nlast-modified: Tue, 02 Sep 2025 01:11:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b6442f-6e0a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYgKoWyBZmLA3dbqeslUCLqYNUgzhCuAY%2BJHxCqLJNAJCENmK7oc5kcyT3uI6RZUG2lfMXm8iaUd%2FW0dRY%2B%2FgGb4%2FgOdWNCVzoHI\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978a43377e1f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d887735262e1941853fc29ae03487bdc","sha1":"329cef5701394b000e8fce0c26300e6df2bf50b0","sha256":"e1501668d96ded5bfc98fc0f573b2feb6cadf57b932e47c960f65aea6fdc4827","sha512":"a6913e28ef2e866b870b842f0143075e88fa3e110f20a8dfc1d4d061fa185199b4f9b990faa6df8cf5592f9722e51aaf2edb924ed2965cfd30a230ddd0b13acd","ssdeep":"768:6pN6iAyTlrEkznFJM6Pabn23na47cxhobU+dK:6pN6lIlICn1PS2q9xhWK","tlshash":"09c2f144632f0c03074a9ea2b51175008672ea3be2e62d7dac7e85323868b79b773f44","first_seen":"2024-05-27T20:46:31Z","last_seen":"2026-08-12T09:54:06.961937Z","times_seen":1439,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"uvnriswamp.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uvnriswamp.cc/?swap=88","date":"2025-09-02T04:28:48.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uvnriswamp.cc/\r\ncontent-type: application/json\r\nContent-Length: 60\r\nOrigin: https://uvnriswamp.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 04:28:48 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-trace-id: 4108d9119462c0e4b98c08419fc462b7\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 978a433ff8ad56b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3fc075d15069541661a6223c0fcf19cf","sha1":"a168d9e5ee257446f10ad171ed172ebd5d2569c0","sha256":"ed5e21408f235ed4b864606bb77a023494714c81853f36597becf09591ecabdd","sha512":"bd215e771eb0eab7feba8f1ac81278df4fffc9442d1ef3845ec119a5047643d42aa094137a597883880251ec1ac1956285a08b59380c871134d716b91baf67b9","ssdeep":"","tlshash":"fe9004c115070731451c0c41d404015130c3375c05040f04440dc5417054147730c31d","first_seen":"2023-05-22T02:38:15Z","last_seen":"2026-06-13T15:26:27.639192Z","times_seen":320,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}