{"report_id":"6decc904-a328-4702-b41d-d6590923f4b9","version":6,"status":"done","tags":[],"date":"2026-01-24T13:50:06Z","url":{"schema":"https","addr":"kyberswap.co","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kyberswap.co/","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"title":"Kyberswap | Decentralized Exchange \u0026 DeFi Liquidity Protocol","dom":{"size":145078,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9189)","md5":"b9a035a4260bd55243618fad7cbe65d4","sha1":"5b06620d048278615e6b02640d74dd7e1c8724b5","sha256":"df00a0cbc77e8e090d7303dcc0ca93d6065310234b16ad40fac4c2d3f0b629c7","sha512":"3e1efc27bc6175cbebfe4e23e24b47b9d8bc7ceedae6d7c82c7622d27984c7ef7b8729e79d8c1f3786a2bad3332d9b1a106b9c539848e6b27e382fcfddf2e113","ssdeep":"1536:32qSNOjvq7XbX3XMQ8XudUsOCrG414zExY1A1uI14zExY1A1XJ/i:mTu+hFJK","tlshash":"94e32bb3124031a49107abd475725b5fb36b607bfb4a92b8b5fc0984d7cda9c88e79c0","dom_hash":"domhashfaa6fa29390ff08c02a0b3b3073523cb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kyberswap.co","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:50:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kyberswap.co","ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":0,"first_seen":"2025-09-10T02:22:22.067249Z","last_seen":"2025-10-08T02:24:16.429513Z","alert_count":46,"request_count":23,"received_data":881419,"sent_data":10463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kyberswap.co/","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b351f56b31b62a5ba23f1616317e2870","sha1":"357d0a777d348c2a15154ecc7f8d713b7de1ab73","sha256":"5e04fe16c4bbf8f8105a80ed16460b2f5298dd2f3bb113bd07c8d72afa0586c8","sha512":"f89f9886bcd61428efe85b7da644c6831cc7474abfdab905fe6e97f395727da41f9aacd67ca3c0ada5a5de062d5dfd0f0a88d7dab518ad129aff89b97d09ef2e","ssdeep":"","tlshash":"6a012859a4a52479147735aa4bcf81997394204bc0c5ea073d6dc74c3fd64644bfbac8","size":660,"data":"","first_seen":"2026-01-24T13:50:08.078398Z","last_seen":"2026-01-24T13:50:08.138604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kyberswap.co/","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:49:44.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:49:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nlast-modified: Tue, 13 Jan 2026 23:21:34 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4kTZ2Cy541N%2BQf26dFpzj5ncaJdgqxdpYsHBpc66OD63pTasLLhzmdwrRNM8Q1QyZRTUPx5NPE3SghRngyxBPrPOO%2FVQRLGS7mFfQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c2ffef38a723181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145054,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9176)","md5":"6faa51f1abbd8004ada944752a45bec2","sha1":"670afa6c6f8cfd10577e519d9114cfd5def7ee3a","sha256":"29cd729b5ded88f01f2d7c8dfb20ff96fa85f7668631a0d325fb68505b611856","sha512":"a3ad152a667b36b4b2f783d511599cb53cdacebce3e01e07feb94ec6b8f36313b3a935c16cc3f62063fe94673c1c1661bfa2d0111168fb0a05414db0e6375a5f","ssdeep":"1536:/2qSNOjvq7XbX3XMQ8XudUsOCrG414zExY1A1uK14zExY1A1XJ/Y0:+Tu+DFJb","tlshash":"b4e32bb3124031a49107abd475725b5fb36b607bfb4a92b8b5fc0984d7cda9c88e79c0","first_seen":"2026-01-24T13:50:08.05582Z","last_seen":"2026-01-24T13:50:08.12292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":92,"dns":58,"connect":1,"send":0,"wait":82,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/755d9eee-8d2d-44b8-ad38-1f2765f036ce.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /755d9eee-8d2d-44b8-ad38-1f2765f036ce.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470474-10c9a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPNR2g28Tmx3mNtrOE0V4GLm0i%2FZV7kUnmjxzJ8rb%2B7xp2Uq4nuTqaVXM3xbvixv3QH%2F3u%2BRJL0rjpV1BPVSK%2B1in9dYBpwef0oUdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef61a5f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"b51030a94b1153535e8bec441a8a0558","sha1":"59b85a6347466c6d78cee72a41684418541946ed","sha256":"7811b4f4943e33699b9d558c33700c693aba5ddc277e27470b7ea5779eeab1f3","sha512":"2e159610ea6d056edf8f228917c58b490450205d6eb3732cdb777b7f20c3e4062601586d0c345dd91d7587d47863cc3872edf920cf23d1e792722bb8b72c0534","ssdeep":"1536:IxYQb0whw9owDW2f0dy/6a8Z+1OapGZzDNz58A/K6yune+Xb7SJ3LN0:Ixlb0whsq2fmyya8QgaODN580y0e+nUu","tlshash":"b56302538af16c4ed52599bcf8163abf9f6b44eb10ac66098a76632d1f2233b07014c7","first_seen":"2023-10-18T16:15:22Z","last_seen":"2026-01-24T13:50:08.125296Z","times_seen":4,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/index-f633a327.css","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /index-f633a327.css HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69470472-264b2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BNa%2FeCn%2Fb0H%2FB0iOtIvB9wM6GFZFeHx3MkTcVqkm2XbeKoHLTTudTLaVlPGLIV4SvZV7Fy5tXwewBmNYgtGERoa%2BOMhC2fY5E5S%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef5fa5149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1252)","md5":"95e6a5bdaf7512a8fbc5e737ac21615c","sha1":"d3c947994fcd825be2e7f2937061eccf2e9533bd","sha256":"f06b4e525a131e24b9fc3af2078b996e57434e832c6b30a962d534e9eca5a56d","sha512":"18ecfd63f0aa8e45d45698e6a2c8a7621c39348460136c2dcab3cead721142ab8c0200130b4f1c7c47b31a7dff91607c01784c268de788a882b5bd75b969ce1c","ssdeep":"1536:1J14BsNEZo14pk98RIl19kRaPsx2TExafsROLUxf/If6lEnCB4vydM36xYflHv9H:ZPuY/AW6Rer","tlshash":"fce31102fa9750587e031e67214fa5987d2c3688b3361a78ed76105de6c8cfc29f7a6c","first_seen":"2026-01-24T13:50:08.048854Z","last_seen":"2026-01-24T13:50:08.126294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/index-0613c640.css","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /index-0613c640.css HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69470472-16dd\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q95iDe72graQtubvJfiMU4zTa8vOO4IABi2aOPeXkevc%2FvQkT81kUX9%2FugdK%2F7Uj7PBwATh5jhc31p5uoZ1ZSy95QM9Mmbt%2FtL0YYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef5fa5449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (454)","md5":"95621dd4bf4dc637320213df26aaff99","sha1":"43dd5f7f587b2b9818bbaf435979e27554b9eb30","sha256":"61e86aa39e2b643ea6bf12351b9c8d22d7e454405aef1a42e8708c84fb077bff","sha512":"38d0c872950f5ecc2b96cb5400771a06ab181a3606bfd7c6263fe34c049fbc060367178a7c544b53b37ae8516e47d1ebeb6e11ed31d3c4afabddd3e82e44daba","ssdeep":"48:5V9RH3ePUnwzh+53eihPZYFhPZjlyBE7hPZ8ypJjJuNXzp/66Wh7i+xg6WiXiuit:D9R7u+tZhhohhlhhGT/6lt7qlwtVGVr","tlshash":"dec18d234f0016f1d9378430b39a8105b32dba09451abcfd4ea5fa55dacd9ee02dfb69","first_seen":"2026-01-24T13:50:08.063151Z","last_seen":"2026-01-24T13:50:08.127107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/fb6ee56c-d9ba-4c0a-8e11-c4bc8d7b235c1754067894004.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /fb6ee56c-d9ba-4c0a-8e11-c4bc8d7b235c1754067894004.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470472-1821\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTTmUobMGw%2FoFTiHKoYMSnTv8QaVKCN8Gm9M6s5dU7u2rBRvRg0rdvvZuHEHlMf50e9oo5d0rljhcbcJwZDoCG%2BRzaf6BcSdB%2FcFfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef61a6049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"444ae76277b65c3452d01e7fe279ed8c","sha1":"fd6884264a0ff12f8a7d5c3e9524a693f65b0446","sha256":"ad35d6414f8681aa57e46b9d25efff3f43983c50af1ed028d7a6a1328d86fd8a","sha512":"cb1be0bdc3f2dfb8740fb0a65570b7bc6791586af94859aab89ee0e6d210e725cbd9ff5ca5d944fedad3b331756fbf57bd3af0805f2e2568cacfc44ca5ca0da9","ssdeep":"96:fSw0CfXnHV8xnpejLEqgjyVqimOp1y+gnjnHBsMrNr86fE5Xku/FAwR1zOa9Sn8s:fSw0CfHV8NOLzguX1qprzc1kkFZOn8s","tlshash":"c7d1af73acccbdbd1b93531425027866d6aabc74e9abf205791a3212840774fb30f5b5","first_seen":"2026-01-24T13:50:08.070578Z","last_seen":"2026-01-24T13:50:08.127921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 50316\r\nlast-modified: Sat, 20 Dec 2025 20:17:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69470476-c48c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8ScVY9rdCrm5QOBOAH8JDgM8s6J1EdgLUDffhQueo0c%2B2wHs2vznZLSEaYc93pAzvqRFySARcaiDuHgGrWOmXPLBJDz1OfXW4w4Rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffef8fac049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-06-07T22:36:50.087984Z","times_seen":20634,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/c4a56ed4-79bd-4af9-9ea5-c691fd560ef8.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /c4a56ed4-79bd-4af9-9ea5-c691fd560ef8.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470474-1765\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7uDHbORvxPANGa6d8l3MoTE82vKmH8kRcGUONVeQIRlTyWoSTPgo51IVPaDkxIroVhm353Wg5jVcu4YbjR84BRp9rH3FpO%2FWyjWwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef60a5749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"61e20ad43bafe0ca2b7ada87f1792a4c","sha1":"6a92887e90fc042ee2e4d0fb3854692beeaaf19a","sha256":"32076120b7bde0202fda306280a9df7917a5ab1a396d4a87db012930f8bbb7b3","sha512":"abeffc786faf67c9a0dc178b0ffb8aae7fbac541765952a55129645914ee52f51ce0e09a753442baa6b984560aa51933a5d24179f1befe1ccf521ea4d5763f2a","ssdeep":"96:4MEbD/XFc+Xcwyn/s11yjmNrD9zNoqtl9QNpvRq3TS+0wv2yb7f+5djnLprn:4rfepwy21yjY39Jzt7QNpvYOe+yb7fe3","tlshash":"a1c19dc0d974348607ab31e946f645e4b26a5f2059329bdf95bf32b1c633336d742103","first_seen":"2024-01-07T14:24:30Z","last_seen":"2026-06-01T18:31:52.100775Z","times_seen":29,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/tether.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /tether.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470474-26f3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2Fhfton%2Bb%2FNTiSU0Pa72ZtvpK45Cgm4sb%2FxohHhHbH15Z5CHByhy4bX668FNmCDDtImu6cE5We%2BM6ANf6T2%2FpsLmfg3B58siWAz6iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef60a5a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"b22d9bcf81826f777c49156d32b00ab7","sha1":"1f2e50cf84b3ca5a96139a0689ef7225a6e8c026","sha256":"c94dd3b5d4b2d110ff762aa3f90ac6270a2d9544cba64b11a5937b3ba431ed62","sha512":"e91c1e7b7a17f6f5140fe9bb9c844fa31d557ac20de46b5ab675472841b22c9ee5763e575e9ea6d4591a6edb82e76d12764de66139f7263348669dc55c845958","ssdeep":"192:bvXJbUCaMinLiLjehWkvziKQCTwpfDcdxPSqbKK0dxd0:bPHcu5Sz/pTwprc/PTKK","tlshash":"7622afa552059175f348da39db2831e17e2beee826c5d44ae3f6420f4a8167ff489cf0","first_seen":"2025-04-16T11:14:42.968829Z","last_seen":"2026-04-27T08:03:58.004875Z","times_seen":14,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/33fe6e69-a07c-4039-a6f9-d3dce12dfca41744705935146.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /33fe6e69-a07c-4039-a6f9-d3dce12dfca41744705935146.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470472-11ef\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PE9uoj4urFfnt9rT97P6mmR%2Bzzj1thEhUEo0e9P0sC9Q339TeOdtzJkHuuAbGEF4H%2BM22yRlg6xjq5qsqAUSg0an76Ro5LN54aJDjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef60a5b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 134, 8-bit/color RGBA, non-interlaced","md5":"8ac9ece94b006b7f2e6e79b4d9c526c9","sha1":"68a12dca8a0e95cb117e0b4aaa3f5ab5d90e8a61","sha256":"138fed55a52393ab4c96f7ac8c469ade5db904fb126d9b6e7d26c527d7917117","sha512":"89d31e90d2450929ab5dab1c33504fee9c1b30533a2d0136c4367faf4a80bf202c66d319f1bde38283b0d988602f55c6de383d4bf949b6bea2545d0bd7981272","ssdeep":"96:Jkhbb9pO76HBb5f7AVAQ2nMrfbTGf6ubAGjvTHi3sza5INl4:JwbBpO76hVU2MrfbTPuk07Hil5I8","tlshash":"11916edd45566da787b6a3b1d610bcb5a8322002672b14908772cd3b37517a3e898998","first_seen":"2026-01-24T13:50:08.02759Z","last_seen":"2026-01-24T13:50:08.131003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/48156446-7224-466a-b290-367a5a708d6c.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /48156446-7224-466a-b290-367a5a708d6c.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470474-7453\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiuWfs8vKi2ti%2Bt1jg834s%2BwvNAHGiY%2FmykKsemBV3T7fo0XkCW5iFjJfWxbKMlUP8916I%2FGLcG576xeek94G2HVYCLld0L7wVyaEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef60a5c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29779,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 599, 8-bit/color RGBA, non-interlaced","md5":"da34f9b4870c614fb6482ddd93df3958","sha1":"67a9cb9cd86a44a13f9a1eea93c94528a41a00bf","sha256":"f79c1ebede5c965d97c0e12417b61ddf4969cdc8e6ac8ebda98f0bcad9ed78b1","sha512":"7338b5468c1115cc02f5104f297bf17e4391ca515a175f71f8548b04b6febee0942ce4e4caccdde40c42a5beee0b8f762841505d3940f41428801d1f0a37dc0e","ssdeep":"768:roGR72oB3iUw1p3OJhwCI1UA/b8zSAyF9OIbPvtZBl:roGR7ZB3Vw1xcKCIGNq9HbPv/","tlshash":"2ed2e1eafb14c1e1ae3cd8692e7398d155479bec550f0328837bb01feea4d5182dc268","first_seen":"2025-04-16T11:14:42.970792Z","last_seen":"2026-01-24T13:50:08.131583Z","times_seen":12,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/chainsecurity-4f69185e.svg","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /chainsecurity-4f69185e.svg HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69470472-1d79\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=696X597Nv5L8t%2BYwzz6MFsLI42hpCVk%2F8UIhfJBCcqbRXiu1EbO3AtpWdQNB8Ps5AQpUdJG%2BCL0srKHmAbNtE1SsHI4OuZfuX7nyBA%3D%3D\"}]}\r\ncf-ray: 9c2ffef61a6149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7545,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2dda438a79618571ba17f8259517a1ef","sha1":"2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2","sha256":"4f69185e7a28cdf58cfb0ae430f34ae8622a18b31d35b414d3b9d48d6a223a05","sha512":"ee87ec6f82e01d76fcbafc3a3ae36dbd4e9f8e19b4257ca46d47d0d68677dad83a3ee8b62242ead7373c82c873919141a2a923800d0b5ade775d56b0a10b00f2","ssdeep":"96:gAkFjsfuvjgOApylYgAmEoUGt9JbCJ4T9xqe0RJCa/MGCsalEMxhH5H:zkFsavS7Gt9xsZEGCsWV5","tlshash":"36f162e183fc6ad4f01497ccf755307874156aab5f4146a8f53d0fe8a7820aa887f8c9","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-01-24T13:50:08.132195Z","times_seen":28,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/omniscia-ccc0d6bf.svg","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /omniscia-ccc0d6bf.svg HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69470472-41a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GveRO%2FP4it5rniJ7S1u7JMM%2FfkHLBoI%2FYPLGOzId05FLVkVzUPomAjBz5x5PyNy31tCQ9wnyV0%2FZnTkjnyEaxSeTiUe6qhawdrUQ9Q%3D%3D\"}]}\r\ncf-ray: 9c2ffef62a6249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1050,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cc37b6f6f1a4d6929b08daf7e4c9918","sha1":"64ad3822e72417845dd513f5c37f061afb1c19e9","sha256":"ccc0d6bf9db586a5b6d1a8c2c73b9f2bd8ea133b5674ca661c58ec0e04ed536c","sha512":"41e0323444c4f02e4b4da438f1245bc589f2dc6e951f7a349c798c3b3f35670da5c9e67fc3838746d33e631174ae43b3ab89b7210b88ab313585da44f954a148","ssdeep":"","tlshash":"f411929ad7a75b34755a4210cb74a5303ba264bf5020f6983eef6620bf159b0508617e","first_seen":"2025-09-26T20:57:34.681272Z","last_seen":"2026-01-24T13:50:08.132831Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/Inter-roman.var-17fe38ab.woff2","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /Inter-roman.var-17fe38ab.woff2 HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/index-f633a327.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 227180\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\npriority: u=4,i=?0\r\netag: \"69470474-3776c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5juVuQt78Edm0z2WdR28o0ZQsNJqLN1NtmZ9tK2Ujfea2gdGU7PdDwJwlxX6M3jJ8HpBiZV5XjVW6JCeliZnd9UMKerGdo0ugtYLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffef95ac949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 227180, version 1.0","md5":"66c6e40883646a7ad993108b2ce2da32","sha1":"7a2602d2ebb08ce895e33addb6fe595f1029431e","sha256":"17fe38ab302c7e5dbfb5c3d87801092d79be958500db6412ed3bc0f126bd53d3","sha512":"8a166f9044346cce8ca92b00f5dac0de6d0ff64ab72fbf390a268049fffb72be2bda1397ae0ee97e37cf33e3c309cc630a638ab9151f944d8d05ad652d6cf261","ssdeep":"6144:ontlH0kriqsEimx44eY23pmX54q880Ocp3AjD11gyHD:GtFriqsu4XP5G9nSFAjxXD","tlshash":"642423fc9f92e4adfe080c34b5050ad7eb090fde516a861e35f191608fa653237285bb","first_seen":"2023-04-08T01:50:08Z","last_seen":"2026-06-07T19:36:13.999818Z","times_seen":10151,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/css2.css","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69470474-fa3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2B2VkOY37S2exKoBZg9zTC40kbJmz6e280bRuXuFQYOHcOburCDors51EkNbs8MadgpZ9L4ju58Ei9YICC8ig0dfBHnY9CErUGsALQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef5ea4d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4003,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (359)","md5":"ddd7fd2315b270221e2af695ed12a2f2","sha1":"3cb068c6e1584fea0e3f75ca8f4d72fa09d8138d","sha256":"5da45e18166fd198785fc864481ed911ebefb5e61e0a7286043e02b44866fe0d","sha512":"58654d123bf58b2497612146acb45d63f3e6019155e24c5bd2600c6be02bb104c6d3ed8750bbb464eeab870c291c08413ddf97ece74e5b1775c42a8d959991e4","ssdeep":"","tlshash":"c581ba0c44572a08c6936c5573ef6f22db2ea17a7004e1306afe2eaedc4f5656371b4d","first_seen":"2026-01-24T13:50:08.024508Z","last_seen":"2026-01-24T13:50:08.134182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/ethereum-989041d8.svg","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /ethereum-989041d8.svg HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69470472-498\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DM81X0n9mTS8rnrouPZNxY2rVjPlpZT4zuZGQ9dh4uJ24NRswUkyV2aU%2BM6BdE%2FJ3AliV%2BGsU2%2FZxrKr5k1oJHiXhUsHNU0JB7l2w%3D%3D\"}]}\r\ncf-ray: 9c2ffef60a5649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f75af7fc85a46fd135731c994b53d5a","sha1":"b7870a49eee95de1ce5265571b2b067bf70d9400","sha256":"989041d871b4f85313eb4367f3b5654db464c0acb95d62144d634dbbe601e193","sha512":"5eca1306fcd54884ece34dd125b0412e6b1ad75fc3dec19c19cc48e202c6244bec97fd9e6287ac94050875cdcb89b3aadd13573001bf867b7f3b4121c796d560","ssdeep":"","tlshash":"b621b0e469b4958cc109421b87fa35da090df96f69e2cc9eb29d04124f31c5da94cb8b","first_seen":"2025-06-02T11:40:46.390816Z","last_seen":"2026-01-24T13:50:08.134792Z","times_seen":18,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/16c82b65-e968-4999-b8ef-54af685260091766065732071.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /16c82b65-e968-4999-b8ef-54af685260091766065732071.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470474-8a4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Uy2PNAlo6RNAKUeUMNC7gEI6FfMLTUgpn1PQaoF4eGl5uEcRCqavkcg1nKJLICUmxMGRUoQCYtwHnOsVZnB11c7QyKZIVWFnyWwpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef61a5e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"731467a0d7fbd1aa4d86a073a976792c","sha1":"0d497e829707bbb89d59d85a8528d0c0a68f20c7","sha256":"bb6ebf9e5ae610e6b03482637353e72292c646bb1349d71d36111561845de72b","sha512":"aa036457c957af94956023ab33587b646b39e3145289a08098af273c12d007a1875c7d43e6144d45be2fa9b8e64d40be7bf17106c0689a6eaf90129e355085c7","ssdeep":"","tlshash":"ed413a8dc219972a5d06cf245c06df73c46d46dae628d238766c5d63b1f5a0c308e8da","first_seen":"2026-01-24T13:50:08.030446Z","last_seen":"2026-01-24T13:50:08.135402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/css2-1.css","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/index-f633a327.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69470474-1397\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxD4VsdwX8UOyfLbG%2Fmwmv7Js%2BF2Hc9xwlrA1M%2FKUKPh%2BlJhkJ%2FP8nX8G3YbIEu8pwCJ%2BAWAQuIBrRQg0HzLZHyBGtIK5CvTXOc6Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef7aa8149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (352)","md5":"8661595430b6dbf384f9fd65124a283a","sha1":"0815edf87f515377db862336c404aa882c0a1884","sha256":"ab13c5796c833a900c5911296c37290ad8733cebd28256bddab2eb5c21d4baa0","sha512":"adb10be4f3c25abb0f61cfba56d2165cc857d187b2469a7bae357d258b5ce1f2b1022de2388a269203851f44295aae76a6afdf51470c6bd99e2192d9ce5a32a1","ssdeep":"48:TcO5kK29rTJc+uBesxOTOSklh9rTJc+uOesxzqODkcg9rTJc+uLesxN:+VTJc+ucIVTJc+u3BJTJc+uyw","tlshash":"f0a19908042b6d08c6434c45b3cf6f298d1c623aa051e1705afe1d99ee4f1726370f1e","first_seen":"2026-01-24T13:50:08.073904Z","last_seen":"2026-01-24T13:50:08.135923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/christmas-logo-dark.svg","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /christmas-logo-dark.svg HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69470472-361a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oc8mVYQgHOygbi%2BTjLMGQHDuX%2BnFkQux2FszTFiPE3dHDj4DeSeQXx2rsEK1nT%2FWVft%2FDxw2GSGE31ZK0HcdP1r5iucO2sBM0tsSZw%3D%3D\"}]}\r\ncf-ray: 9c2ffef5fa5549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13850,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e90fb094192cd8b5ea955930d799bb1","sha1":"bfca8e8135d5cf33e748848e9c08a2984d0b8420","sha256":"504d1fb5546a87a3310fc9a963158e72386262d97dffec828eafe6e22b0a1f33","sha512":"a625dc4f069e1edbc7b165c1c5584bec2ffe99bf77040a95296f59d7737d39409ff5e3ac8b1c5bf7487572b2a83e75df758cf113aa95f5c9ff8e6686afe77523","ssdeep":"192:D4NFW6KBPnSD/ZzrCDaqd68oXYFNql0rcbNJjWQg8uAdkznCefYPvQwq5c3x7g55:FFfSD/YG8lNHrGJj9jPkMP0/r65Y","tlshash":"815285d477bad3f4e105fbe1cb6aa4b93f1b16f56e20c57c87e21d90d91106d88988c2","first_seen":"2026-01-24T13:50:08.059563Z","last_seen":"2026-01-24T13:50:08.136462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/bitlight.png","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /bitlight.png HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Dec 2025 20:17:56 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69470474-30ed\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qMWti24qV4Xz5y%2ByEnzsEKJYlBh56FFp0gbjRFRBIg96y8ew3894a1OnmV%2FS1GycyVIpSMrgvf6gRC7S%2BdlDTWjkp8T%2BlBrlkqQgGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ffef60a5949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"940d3ccd854350480240d590794223d1","sha1":"a7536f58847af125e17b3645b07eb63f3a012ce1","sha256":"4e8bc9a4c3398306ea380892c563772e2e9ce8715fed285fd008b4d3b025d73c","sha512":"0c29d6709c2b61353ac3814a3da9b5f412ab182497f7c6e4a85934aa37035f0ba5258f21d16df2e2cb843115c6ed57bdb2a760bca6acdb179ad93b815cc1f1a6","ssdeep":"192:YjU45joRJPXzmqWLkQPGX1MBoiPVYkAnWzMGivWuEcuORAGIyY8os0EVNyxAxk27:UJFSJPzmqFabosVYLQMGW3AyOs/VAw","tlshash":"3f42c0dbd46892b47446126a830b627f80817ffcada02de954e47237cd1260becd41d3","first_seen":"2026-01-24T13:50:08.065022Z","last_seen":"2026-01-24T13:50:08.136993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/spearbit-930e9ecb.svg","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /spearbit-930e9ecb.svg HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 20 Dec 2025 20:17:54 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69470472-bc4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHkGTxCyOO70da3Z1O1swDBIeEx%2BuuvQxL3PUhfZFXlmXFuScbleeHCUJ4sXhYuderhn3Z7X1PUNe827EAobU%2BCcrYTgQZ0S53Z3Ag%3D%3D\"}]}\r\ncf-ray: 9c2ffef62a6349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3012,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2dd4242375e2b47f7a65ad7521d39d7a","sha1":"c0906697614fd882da369931df622e5ded136b40","sha256":"930e9ecb6867e549f3cd091c6384974bbd71ecf405991a43d50cf7e9f4750bd7","sha512":"7a83a4943bfc0bff5d1553058927b6eb27c81c5864a52ab33e601195f70eca61e361414185f1a4c940add280d59033d271f9fa979984309e12e4db5bd3c328b3","ssdeep":"","tlshash":"4051a588760886f8e99957e258f48cb52e0724ff37849064d73a78c18e224a8d96d9c7","first_seen":"2026-01-24T13:50:08.032842Z","last_seen":"2026-01-24T13:50:08.137552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 50316\r\nlast-modified: Sat, 20 Dec 2025 20:17:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69470476-c48c\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6XKCw7DdZQa2aI6DoAfy2567a93e36VkUw5d2Jc6b%2BvVAeFs%2BHTF7yTJR3esEMst8sLbO1m3j6nrcs9GawPsY6HO3fkTZrrlWl42w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffef93ac449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-06-07T22:36:50.087984Z","times_seen":20634,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:45.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 50316\r\nlast-modified: Sat, 20 Dec 2025 20:17:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69470476-c48c\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDkHfMCptI9QrAZ%2BR7ycQXWkhN%2FRtgqxGi7Vm4zD7EJbaPQ2yn1qSOnpIVWRM%2BViAeTwDiTzNmxmVzjv4P3uew1ZSETHuSt7T2m%2BvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffef94ac549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-06-07T22:36:50.087984Z","times_seen":20634,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kyberswap.co/favicon.ico","fqdn":"kyberswap.co","domain":"kyberswap.co","tld":"co"},"ip":{"addr":"104.21.2.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswap.co/","date":"2026-01-24T13:49:46.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 16:09:48 GMT","end":"Tue, 17 Mar 2026 17:08:36 GMT"},"fingerprint":{"sha1":"1B:B1:98:C0:D4:EB:8B:ED:90:0F:FE:73:9D:19:B1:69:F6:E8:63:84","sha256":"44:2A:DE:51:C7:AA:1E:FE:BE:A2:CF:32:1E:08:5E:09:06:1F:F3:14:F4:FE:35:23:7B:C7:92:3E:90:29:5E:B8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kyberswap.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswap.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:49:46 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sat, 20 Dec 2025 20:23:42 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"694705ce-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxvhh2SRI4xvEyLA6gDx9k82S44qcy4JWJV5cH5eaXzTTpD9QY7pPqwrJZY4p%2B9oBTqh1PMKepABQxClil0%2B%2BTgHEn6s%2Fi5M29g6Fw%3D%3D\"}]}\r\ncf-ray: 9c2ffefb2af549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"4ed5e1a09a453029ecd47ad91a84cc51","sha1":"88ff20874587cb2b5a825c864db1a4653e36e74a","sha256":"8ed4737f489497eff35b6382c37a73da01275cdb684cc6db9916f884c3980cae","sha512":"631331b11f895f5aed8c80764394999df39b50f1de626f3fdee9589f118f9bc6a2257b963efe3745469c9e03cfcf82d8ca356833b7f11c799a66da821e52b8a9","ssdeep":"48:DRiVEPIHc5nIzaWLDZJLhCzZqHt6lJqqzPbnhMrgpWh7Jj6WL:5wHEAaWLDZJ9CzZqHt6lJqqXvcx","tlshash":"8d91fdf61f40d47aea8239318d8480749e753afb99567b690681ef2336720619ecb0fd","first_seen":"2026-01-24T13:50:08.066805Z","last_seen":"2026-01-24T13:50:08.138076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kyberswap.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}