{"report_id":"6aa08f46-8531-4d50-8dc6-083a3612281f","version":6,"status":"done","tags":[],"date":"2026-05-04T17:06:02Z","url":{"schema":"https","addr":"trxswap.net/","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.175","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"trxswap.net/","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"title":"TRXSwap | Independent TRX Swap and TRON Energy Service","dom":{"size":27956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (650)","md5":"f990455b61d057458741b29482344752","sha1":"d8269298ddae56f55e10f7457793f4d045ddb98f","sha256":"ab459485ef50a778ad019b90e11d6de187e94952361ce5b5b5238ff5c133c1b5","sha512":"848bb698e76c31a84a5cc453131f8797928a4ea8991c77601b7d86fb400cc6fd0a4d52f51667ee91f05e0d2a1e0f4fc5698f332a1a0b71124c616428060d260a","ssdeep":"768:WD7DRycOO98qggLQ9+gvRx/WTP4B4xFsgJvogCh:G1ycOO9LMFxeLlGh","tlshash":"cdc2a33292f0163241d352f1b8a667696f92d407f5ea19e1b3ec479c4fe9ccdc86b209","dom_hash":"domhash7f673e3046df330b0d161cb81093b2cb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trxswap.net/","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.175","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-08T17:06:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"api.trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-03T22:38:47.35999Z","alert_count":0,"request_count":2,"received_data":1000,"sent_data":1797,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trxswap.net","ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":16,"request_count":16,"received_data":181196,"sent_data":7326,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"api.trxswap.net","ip":{"addr":"148.251.53.175","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":566,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-03T22:25:11.554838Z","alert_count":0,"request_count":1,"received_data":430579,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-03T22:45:14.235278Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-07T18:58:00.053442Z","times_seen":78098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"441e96951b5a267418362dd5c1bf9ab6","sha1":"78d6a73791f4aadea3aa5c790e76f0a6a58ed6a7","sha256":"da75558955ca98a43965f8684b8c0d3f304fa01b3f7bc6194ff68f653c24006a","sha512":"92aaf771cd9a4e420df0846595068a200a39a5270c91c226244e8868aca2b4a0a2ceb1a25f47d9a51b7ae6c5395037fed9c9bb2f93baf2a0750c06fc3c238bf3","ssdeep":"","tlshash":"10c02b89220a4c7142fb2700cb3ffe04b0133214e4f06a35489e63045d20f07d748850","size":155,"data":"","first_seen":"2026-05-04T17:06:13.123688Z","last_seen":"2026-05-04T17:09:40.418702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18138293809","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd1e7539016f04b6f061022f6b50a80","sha1":"5e8f2595e89db7bfa4135de3520567e7b80adbef","sha256":"2d4935b76ec3a741cb0b25ee4553854ee618ade880720e89c7ecd2eee134db68","sha512":"34684c2eab80adcf502a484ca5c03be27543a7a5f01c3abe04454c154a81db07a66c0d9a8c2df0b9c26df283c4e5d0e1bec1b0e6d6389350d71dd44d269cafa3","ssdeep":"6144:0g41vxK0jZyka/zrbAC1CmBHf/1uHP9LfV:OxKsTabrBOj","tlshash":"209418cdb3d674625396f478803f018ba57a29e2b44cc899f189cce42d74a9a4277f7c","size":429929,"data":"","first_seen":"2026-05-04T17:06:13.114343Z","last_seen":"2026-05-04T17:09:40.417201Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/ui-shell.js","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4090d0b6e240bea8b1c25aff24b674b3","sha1":"3f7ecf26841cd55ad42b2603007b8c936ced2523","sha256":"f7d425d2429dd99f91ae8e4ce532a8b93e082d7e22c9e697d5937b53eae66c15","sha512":"9efb95868a89447e17acb60bbe364f712be34c32c5c88e135cb00d9d5b81b4bcc66287fcf17c6cb55eaf8280861810c0a8f345273bcfd5ac2924cea8dfae6ab2","ssdeep":"96:UQ/zCXAIS6EWTIikPxCow6h0POCJhswaPPJtsmromebmDCm9EnLwyP8aadPBePBB:U0zCNS6EWDRp6EJbaPnsao/bECyELw2t","tlshash":"6eb14f987afb21b11a33317e8bcfa15838769403100acd057d4c81942fa897b1afafcd","size":5153,"data":"","first_seen":"2026-05-04T17:06:13.121617Z","last_seen":"2026-05-28T13:09:06.096519Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trxswap.net/","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T17:05:40.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 04 May 2026 04:57:57 GMT\r\netag: \"6ca8-69f82755-b4b11eaf4c298326;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5331\r\ndate: Mon, 04 May 2026 17:05:40 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27816,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9f938ebebe71fcdf0f51c31350725392","sha1":"e7c53f5e3d8288d10d8f77391c22197f49044473","sha256":"a8b7cbcca4d096ba6d51d3298b41d50e724c1c16c0b647c552f1e1eca65c8972","sha512":"a4925326187d5b98bffc973b16e4f12a648869a2d1499c320246bcde3d6afd9b435c0c9c601f15dc9021b7bf2efec552464c04e01049e60303bce3d59c38f639","ssdeep":"768:gD7hDcOOXqggL8+gvRx/WTPn54xFlgJOogLz:AhDcOOeKxeG7Hz","tlshash":"bac2b43292f0163241d352f178a767aa2f919407f5ea18e1b3ec439c4fe9dcdc96b209","first_seen":"2026-05-04T17:06:13.105935Z","last_seen":"2026-05-04T17:09:40.40846Z","times_seen":2,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":114,"dns":67,"connect":34,"send":0,"wait":34,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/imtoken.a47bc069bc7b9ad18023.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/imtoken.a47bc069bc7b9ad18023.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Mar 2026 23:24:38 GMT\r\netag: \"2973-69c46eb6-ce0297dcd6193c7b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 10611\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced","md5":"64782bb45106380402d482c05a2bc29d","sha1":"e6acfac147e8c8f492aaa84a4312deab117b63ab","sha256":"cda09ce7738aa7afc103b11fd63f99773c714a0bee0c05f24eaf586aabf6e8eb","sha512":"d3001489420da0bd938335d16944f206d10878c20e220eaaf95488f0e05404466bb2cde31f5bcb5c86217cca3d5ac38c431c88683aa36c0daaaa50e408064eb3","ssdeep":"192:oXS+P+d50EKEm2qX0/39Bz8WbK8hTfaUv0HY7ox7d7C3OalKwqNMfK:oCa+dVmA3oWbKETDv0jx7Tal/qyfK","tlshash":"fe22ae57515f2022632e20baec9896e5afd89b5c7c431ce3d28015ff8f9624f63945f2","first_seen":"2025-07-25T10:07:59.699014Z","last_seen":"2026-06-02T11:53:19.582349Z","times_seen":129,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.trxswap.net/health","fqdn":"api.trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.175","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /health HTTP/1.1\r\nHost: api.trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trxswap.net/\r\nOrigin: https://trxswap.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trxswap.net\r\nvary: Origin,User-Agent\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"58-oEzmoyj/gXmDPju9o1O+mW+nGE0\"\r\ncontent-length: 88\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"14daca7f09549befaf068a7d7ac9ed82","sha1":"a04ce6a328ff8179833e3bbda353be996fa7184d","sha256":"a91e521c217fa99796c0626892381ebdd8a2864624c24596d2bb5c7317effe4f","sha512":"ee8ed512c4d57730b5dbf0666460a073467d2c16e1027006bec6af81efab23ad1264881a64f2f82bb5a056c11a6c98d2bb060476e2e20e80d792a12f35307a67","ssdeep":"","tlshash":"d5b01200204563254cd00548f5146f077c6a2233940c280d60bd311701ac0830002017","first_seen":"2026-05-04T17:06:13.107418Z","last_seen":"2026-05-28T13:09:06.091663Z","times_seen":3,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":145,"dns":67,"connect":34,"send":0,"wait":35,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"api.trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/favicon.c8afb235daffa21292d6.ico","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/favicon.c8afb235daffa21292d6.ico HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 26 Mar 2026 15:13:22 GMT\r\netag: \"13ca-69c54d12-d034115e84eb555c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4589\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5066,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 96x96, components 3","md5":"dfd8216146659ccecc92ecbbcaf9bf66","sha1":"964aca9783b2c56c5f03f8b497dc6d819dc74b93","sha256":"3fe428733a4420540eaba9606a52c2000b8651b76b0caa2ef815bfad3bfe7c19","sha512":"f7ddb8551636f28fae2f5a27153db07f463775d78348cd37258dcbdc2cac6dd3b16c50497fd62d576345a5e169eb2fe3591fdc1a98db2a43d563de42fd6ba7c1","ssdeep":"96:NUEzs1hMH0EnnnYI5Bx4V0ETN5H+AGlWFKJi7Db9OT8e89rbIQfwWWYTMmrDfJs3:N9s1hMH0qnnE7N5pbBOTxUXJfQYQsJ4","tlshash":"d8a16dbdb37253b8cb51f774cc836b56e38cb7419e752a173d701252be102ca0c08a12","first_seen":"2026-05-04T17:06:13.108891Z","last_seen":"2026-05-28T13:09:06.088812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/symbiosis-display.woff2","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/symbiosis-display.woff2 HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trxswap.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 26 Mar 2026 10:28:21 GMT\r\netag: \"6b0c-69c50a45-3ad719a469d03d01;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 27404\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27404, version 4.0","md5":"d72d711888bbd8ad9db87ee0a654d3f1","sha1":"bfe432fdebd80321ed03f445c0fa94cd01a99c3b","sha256":"4107b11930c4eef1f6ae5a76d441562e6d21a601f1781f37fd085542cd87412b","sha512":"204ce6cf69a2d7adca22677b53d1171bd3528ab1384997602710e628195d4f86a8041dbee519bf2eea9893f756077882c907b01703736500fc41853733b2e81d","ssdeep":"768:OVP0PBByerWbGSsXu+TWVZNqMpToHbPxD6WVf/:1KAhSsXu+OOPJ6Y","tlshash":"cfc2e103d22d191185377fbe9f94d4373fee4080a789db549660ae40b2c72b18a6d79b","first_seen":"2023-12-29T15:34:12Z","last_seen":"2026-06-07T05:19:54.825578Z","times_seen":2340,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/logo.234b00e2329cafb68710.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/logo.234b00e2329cafb68710.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Mar 2026 11:16:49 GMT\r\netag: \"13ca-69c515a1-4838e932bd97e441;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 5066\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5066,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 96x96, components 3","md5":"dfd8216146659ccecc92ecbbcaf9bf66","sha1":"964aca9783b2c56c5f03f8b497dc6d819dc74b93","sha256":"3fe428733a4420540eaba9606a52c2000b8651b76b0caa2ef815bfad3bfe7c19","sha512":"f7ddb8551636f28fae2f5a27153db07f463775d78348cd37258dcbdc2cac6dd3b16c50497fd62d576345a5e169eb2fe3591fdc1a98db2a43d563de42fd6ba7c1","ssdeep":"96:NUEzs1hMH0EnnnYI5Bx4V0ETN5H+AGlWFKJi7Db9OT8e89rbIQfwWWYTMmrDfJs3:N9s1hMH0qnnE7N5pbBOTxUXJfQYQsJ4","tlshash":"d8a16dbdb37253b8cb51f774cc836b56e38cb7419e752a173d701252be102ca0c08a12","first_seen":"2026-05-04T17:06:13.108891Z","last_seen":"2026-05-28T13:09:06.088812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/safepal.3d409c82d7d947f8c201.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/safepal.3d409c82d7d947f8c201.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Mar 2026 23:24:38 GMT\r\netag: \"6c38-69c46eb6-d9e08f98d6f8a732;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 27704\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"511edb00b41c6cf27e9299653ed58d3d","sha1":"bb90e90d443d587062662d7a719a78e0eb7b1aaf","sha256":"94b7474af21dd057ca9b8e18a896866edfb239137cc86c821d8951c9381a2264","sha512":"9ee86a26b02b5d601dc06bc326f4996940ff467d207f2cb5a00d71e95fa424ccb91fee7ddd4cb6f8fe2b6bfb7df774b78a56bcdf2931d0cb5b367adcc55c6d73","ssdeep":"768:lmd3lJorhZKPb3G0pcW18JDZ8GJi+8/NmskK1WnMjnvApKLVp:AXJkcPC0pF2ji+mNXkK1dYpi","tlshash":"96c2f11f96ba97cb27958777e4d22084f8a73652e1205acb08b25cec2c45dfdd4b4d23","first_seen":"2025-07-25T10:07:59.637554Z","last_seen":"2026-06-02T11:53:19.581763Z","times_seen":127,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/WalletConnect.bd1727b2c6b0798d35c1.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/WalletConnect.bd1727b2c6b0798d35c1.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Mar 2026 23:24:38 GMT\r\netag: \"1394-69c46eb6-9973c11e2435c24a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 5012\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 692, 8-bit colormap, non-interlaced","md5":"e4d5216b884d99bb09fc59c1e4bf9a67","sha1":"58d905084f7abe2b2e5c3e3fd59a29c24a7fb7b2","sha256":"0fe9c0181028aeb6a46f07ce131a3c912fec5c632cddfb13eb2e1ca39da9505f","sha512":"17f258b7b2063205f9105a7ce1251225afca63f2398f1bc7ca3e501c793333024e0762e428fda9608da1739e88ffc2bf89894295de59dbcf3816cd58072454b5","ssdeep":"96:XStJiGUbFMArS6lfHpn4TgSuTmaF/ipkbnXpejT9RxaPbKkxOz7LNIT:XStJiGUbFwSp1SuFiybn5ejTGbKl/BM","tlshash":"e2a15bd2a4ebac81cbd412751421dc52bd27c972c6c2c1a7eb3b982d09d6ea94c3a31c","first_seen":"2025-06-26T16:07:51.289575Z","last_seen":"2026-06-02T11:53:19.576516Z","times_seen":129,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/ui-shell.css","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /ui-shell.css HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 11:17:25 GMT\r\netag: \"6f0e-69ccfec5-ba6db7b2a35c0352;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4985\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28430,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"52f4d2d0125102cac977bacc107f5b9c","sha1":"231bdf7ff727e01953328d5abb2ed185a6f270ee","sha256":"4a21b4f878e6cac876f326e25489a41220b2be1097f92272000110f16ee31dca","sha512":"659061dc7d1d53a8ca2e7414d3b7eda65403dc294f334c3cf5d1557876c225f9c5e93f5163900da4b3a72def83c277ef4e09efb0d420bfb93cd65afacec99c0e","ssdeep":"192:MjLJ2L0dvyzHkuXV6Jn/NoE+y3kUZg7mhOGFtrtX38ZS3++hzmKmNg8d0YDGqzvy:7ilK94CtDwPj","tlshash":"3dd2205296e30a90f83bd0b86b9bdb56775c9053a489c96fffde710c4f494d9e070a08","first_seen":"2026-05-04T17:06:13.112978Z","last_seen":"2026-05-28T13:09:06.058871Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18138293809","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtag/js?id=AW-18138293809 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nexpires: Mon, 04 May 2026 17:05:41 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 04 May 2026 16:38:56 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144986\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429929,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"bcd1e7539016f04b6f061022f6b50a80","sha1":"5e8f2595e89db7bfa4135de3520567e7b80adbef","sha256":"2d4935b76ec3a741cb0b25ee4553854ee618ade880720e89c7ecd2eee134db68","sha512":"34684c2eab80adcf502a484ca5c03be27543a7a5f01c3abe04454c154a81db07a66c0d9a8c2df0b9c26df283c4e5d0e1bec1b0e6d6389350d71dd44d269cafa3","ssdeep":"6144:0g41vxK0jZyka/zrbAC1CmBHf/1uHP9LfV:OxKsTabrBOj","tlshash":"209418cdb3d674625396f478803f018ba57a29e2b44cc899f189cce42d74a9a4277f7c","first_seen":"2026-05-04T17:06:13.114343Z","last_seen":"2026-05-04T17:09:40.417201Z","times_seen":2,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":147,"dns":0,"connect":25,"send":0,"wait":59,"receive":58,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/Trust.27b0eac7ee52b2f6550c.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/Trust.27b0eac7ee52b2f6550c.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Mar 2026 23:24:38 GMT\r\netag: \"1015-69c46eb6-71651a5a8f3ca3ae;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4117\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4117,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"93b67a3e4ea968584b96307da79079d7","sha1":"44d4108bc0cfe97dc16aa97090502014bb0cb5f0","sha256":"2b28e10267c900818bdd8c1cff14472cc6e70c81ebe8eba7c7d7fe27cc007bc2","sha512":"29f0a6afd9eb034b74550e85f62c8fc1d2bb5a135c6d6c680b180859d0bbaf58b31f112e6fbc93d56752b372cb6b72b76e10a65470db770f7c02268a5762c179","ssdeep":"96:FHvPzwSrSzezoQzqhixJHvVoiHtciiAvuP/t+:F38SuzkoYRxNNoAKcQ+","tlshash":"06818ecfa991c5345a106fbc1c8100b4b679396991b52a3d0cac2b2d458ad68cbb53dc","first_seen":"2025-06-26T16:07:51.291178Z","last_seen":"2026-06-02T11:53:19.591789Z","times_seen":136,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/binancew3w.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/binancew3w.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Mar 2026 15:03:27 GMT\r\netag: \"cff-69c54abf-3491d49b94f34a4d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3327\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5a11a30728446ef34ac8014d50ec00f7","sha1":"1db62c52214cbc93f970d9555d83e4efdb8830c5","sha256":"807e8174dace81c78fc32dbfcf20bba9317bb6502a47c6697245abeb5edc13b9","sha512":"d6d37e34d98f3ad1aef0c87cdd8abc1acaf1bbbee1317cf87edb67c3c8d194ff45ba65ac3d4b47146db0a71cb1278191ead2ef36bf19c47933e35e1ac1e57c89","ssdeep":"","tlshash":"db61f7d41d4b02f2626b3811167b743e9835c4227e58bb6e32a1bf9b8354a391cad792","first_seen":"2024-10-08T20:51:51Z","last_seen":"2026-06-02T18:15:29.71508Z","times_seen":624,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/okx.6bf5a52ec1c367a3fc94.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/okx.6bf5a52ec1c367a3fc94.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Mar 2026 23:24:38 GMT\r\netag: \"28d-69c46eb6-aa468fb75e6ac95a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 653\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"665e88640125bbccbd2db8e0913625a7","sha1":"eeed409718e1d1a274d07316cc341ad5e7fd9ea6","sha256":"baddc63d3e00843b92911baa967ef255253a7af1384f9afdb0713f4924ca4b04","sha512":"889cab02d006dd23378e5cc74905e9bd5322858bf6a59717895aea0ad1629e7e2a7b713e29fd46e2388ba09306c47190e04e8a9983d2605b26baea8f81af4a74","ssdeep":"","tlshash":"5cf0a2c253e75c3cf7587c7cd7e1d926a8b12bce6d598243455a19ac78934264510b81","first_seen":"2023-05-07T21:47:35Z","last_seen":"2026-06-07T20:02:06.201067Z","times_seen":355,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://trxswap.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f6917790b30a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-07T18:58:00.053442Z","times_seen":78098,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":1,"dns":4,"connect":1,"send":0,"wait":14,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/apple-icon.773e5c006061b9e2f0fe.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/apple-icon.773e5c006061b9e2f0fe.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-07T20:30:00.863749Z","times_seen":132456,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/symbiosis-body.woff2","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/symbiosis-body.woff2 HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trxswap.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 26 Mar 2026 10:28:21 GMT\r\netag: \"3d50-69c50a45-1a7423ba260efcbd;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 15696\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15696,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15696, version 1.0","md5":"c9c8cb77f7c399daa3d0613ca0ad70bc","sha1":"54745bb18fd16a61d79229b132abcfe89bbba1fc","sha256":"24129d5cc90518c253b0478c7723e7ba79f22a8e6993cbec4b3479fcd0c1c714","sha512":"b3a1b10611419da1862bc6e429abeedf8e881c63504018c113e9de984b2745179077f6e168214e33c1460a00def647dbdfa3c4a8752c52d4b14fd5e0a6419556","ssdeep":"192:0v8jru4peswKeGtASmtlVz31Hi/b3t8tg1cQ6JlVlCyLLi8jaE1/sT/RGS995dMe:c8jruYeRGWdVhCD9Eg0bkML/A5y/G","tlshash":"1362d11e7e354ac143358b27226b4314eb533cb3a6a272fa121e57335bf221b2967371","first_seen":"2024-01-21T15:47:34Z","last_seen":"2026-05-28T13:09:06.076487Z","times_seen":26,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/img/tronlink.d99d22355fc4cec2ea0d.png","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /img/tronlink.d99d22355fc4cec2ea0d.png HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 25 Mar 2026 23:24:38 GMT\r\netag: \"1bc6-69c46eb6-1d4f6cc7a9433a9f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7110\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 93, 8-bit/color RGBA, non-interlaced","md5":"41d851008b4090fca47edb4af65821b5","sha1":"a85f4865794e504d274e9ab5d5e0d79829697246","sha256":"fb1612c3f4cbad017db9eb194a166f42b266e0927b619b879c0ac8714d204daf","sha512":"515e0b544ee25d6469df54f317612c6212f55152e0c9acca8b31740e483f5f0752e4fe85572116594f7abdb98761713d7c03e74d2038b1396a340c61964316d2","ssdeep":"96:7SHy5TwYKL2vD0bWgJP4x/S19U0/ssFtdcGPfssctmHMSVIET+pWsrujnsvaSEKM:OHuwYy+DlG6q1mQsac/H3phujE3477oy","tlshash":"65e1ae92f348b471769d2163efa3510890bcdcc887afca08a013ed2de88c13b854b772","first_seen":"2023-07-31T21:17:56Z","last_seen":"2026-06-02T11:53:19.58844Z","times_seen":157,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/ui-shell.js","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"GET /ui-shell.js HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 11 May 2026 17:05:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 10:48:58 GMT\r\netag: \"1421-69ccf81a-c70f21fba0328962;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1498\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4090d0b6e240bea8b1c25aff24b674b3","sha1":"3f7ecf26841cd55ad42b2603007b8c936ced2523","sha256":"f7d425d2429dd99f91ae8e4ce532a8b93e082d7e22c9e697d5937b53eae66c15","sha512":"9efb95868a89447e17acb60bbe364f712be34c32c5c88e135cb00d9d5b81b4bcc66287fcf17c6cb55eaf8280861810c0a8f345273bcfd5ac2924cea8dfae6ab2","ssdeep":"96:UQ/zCXAIS6EWTIikPxCow6h0POCJhswaPPJtsmromebmDCm9EnLwyP8aadPBePBB:U0zCNS6EWDRp6EJbaPnsao/bECyELw2t","tlshash":"6eb14f987afb21b11a33317e8bcfa15838769403100acd057d4c81942fa897b1afafcd","first_seen":"2026-05-04T17:06:13.121617Z","last_seen":"2026-05-28T13:09:06.096519Z","times_seen":3,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxswap.net/cdn-cgi/rum?","fqdn":"trxswap.net","domain":"trxswap.net","tld":"net"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxswap.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 16:30:43 GMT","end":"Tue, 23 Jun 2026 16:30:42 GMT"},"fingerprint":{"sha1":"F7:1B:C0:9F:C6:F8:B1:87:FF:10:40:DC:CD:5A:58:F1:1A:93:38:A5","sha256":"39:E0:D2:E8:C6:CC:AE:4B:1C:CD:F1:F4:87:1B:1C:0F:9B:E1:DC:FF:82:EF:83:A8:3A:4B:5C:45:BA:0E:24:7E"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: trxswap.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 634\r\nOrigin: https://trxswap.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nCookie: _gcl_au=1.1.1580822392.1777914342\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":634,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":679,\"startTime\":1777914340758,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"40a101f1-8ca0-4139-a170-81778b5d2dd4\",\"location\":\"https://trxswap.net/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":12,\"domainLookupEnd\":79,\"connectStart\":80,\"connectEnd\":161,\"requestStart\":161,\"responseStart\":195,\"responseEnd\":195,\"domInteractive\":622,\"domComplete\":897,\"loadEventStart\":897,\"loadEventEnd\":897,\"transferSize\":5813,\"decodedBodySize\":27816},\"siteToken\":\"79ff7553008e4a9ead0ab2d01a8bc239\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-07T20:30:00.863749Z","times_seen":132456,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"trxswap.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=18\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ftrxswap.net%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=897381360.1777914342\u0026dt=TRXSwap%20%7C%20Independent%20TRX%20Swap%20and%20TRON%20Energy%20Service\u0026auid=1580822392.1777914342\u0026navt=n\u0026npa=1\u0026gtm=45be64u0v9251308277za200zd9251308277xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938466~115938468~118128923~118289195\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-18138293809\u0026tid=AW-18138293809\u0026tft=1777914341715\u0026tfd=957","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:41.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"POST /ccm/collect?rcb=18\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ftrxswap.net%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=897381360.1777914342\u0026dt=TRXSwap%20%7C%20Independent%20TRX%20Swap%20and%20TRON%20Energy%20Service\u0026auid=1580822392.1777914342\u0026navt=n\u0026npa=1\u0026gtm=45be64u0v9251308277za200zd9251308277xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938466~115938468~118128923~118289195\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-18138293809\u0026tid=AW-18138293809\u0026tft=1777914341715\u0026tfd=957 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trxswap.net/\r\nOrigin: https://trxswap.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ndate: Mon, 04 May 2026 17:05:41 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://trxswap.net\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T20:34:21.112536Z","times_seen":16220865,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":166,"dns":79,"connect":21,"send":0,"wait":45,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=18\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ftrxswap.net%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=897381360.1777914342\u0026dt=TRXSwap%20%7C%20Independent%20TRX%20Swap%20and%20TRON%20Energy%20Service\u0026auid=1580822392.1777914342\u0026navt=n\u0026npa=1\u0026gtm=45be64u0v9251308277za200zd9251308277xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938466~115938468~118128923~118289195\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-18138293809\u0026tid=AW-18138293809\u0026tft=1777914341715\u0026tfd=957","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trxswap.net/","date":"2026-05-04T17:05:42.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"GET /ccm/collect?rcb=18\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ftrxswap.net%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=897381360.1777914342\u0026dt=TRXSwap%20%7C%20Independent%20TRX%20Swap%20and%20TRON%20Energy%20Service\u0026auid=1580822392.1777914342\u0026navt=n\u0026npa=1\u0026gtm=45be64u0v9251308277za200zd9251308277xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938466~115938468~118128923~118289195\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-18138293809\u0026tid=AW-18138293809\u0026tft=1777914341715\u0026tfd=957 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trxswap.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ndate: Mon, 04 May 2026 17:05:42 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T20:34:21.112536Z","times_seen":16220865,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}