{"report_id":"7469c08b-90cc-48cb-8e1a-ee755667d106","version":6,"status":"done","tags":[],"date":"2026-01-07T07:57:15Z","url":{"schema":"https","addr":"swissborg.click","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"104.21.57.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"swissborg.click/","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"title":"SwissBorg - Sicherer Krypto-Kauf und -Verkauf","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"swissborg.click","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"104.21.57.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T07:57:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"swissborg.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-01-05T05:01:12.236186Z","alert_count":0,"request_count":1,"received_data":1763,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"website-media.swissborg.com","ip":{"addr":"172.67.163.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-12-17","domain_rank":0,"first_seen":"2025-10-03T04:15:59.632486Z","last_seen":"2025-12-31T16:59:08.145281Z","alert_count":0,"request_count":1,"received_data":5157036,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"swissborg.click","ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-30","domain_rank":0,"first_seen":"2026-01-07T07:57:16.327038Z","last_seen":"2026-01-07T07:57:16.327038Z","alert_count":6,"request_count":6,"received_data":6585433,"sent_data":2728,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bitcoinlausanne.ch","ip":{"addr":"217.70.186.106","port":443,"asn":29169,"as":"GANDI SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-31T16:59:07.573033Z","last_seen":"2025-12-31T16:59:07.573033Z","alert_count":0,"request_count":1,"received_data":91015,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Varnish:6.3","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"swissborg.click/","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eae9b1c8aaeb6933acba15c03d4fe874","sha1":"4e03cd075cd80539638fabbafee27ea48037271f","sha256":"eaaaf30daff3547f31e365a6b5f761f57a030e1d316e8e34984c30d816ebbd98","sha512":"0ad90b0c4a0cfe324fa1fa712b71771c4eb4372e4b6eec177a5a27f91378a8a45a0419a6a03a354c30ac0ecdaccb7d9f7df6882c4b6a87403ca5f2319ace8b48","ssdeep":"","tlshash":"dc11ab5825b701f613a7f42c133bea01243214532148edd1b81e8b808fc589821b4bdb","size":1045,"data":"","first_seen":"2025-12-31T16:59:12.284629Z","last_seen":"2026-01-07T07:57:20.727807Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/0c2de452-f8d4-4d75-b36a-2d8b9a3304b5","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-04T05:46:09.708582Z","times_seen":5105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/app-240890c41a725aec.min.js","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a01a75131ad4ac62effe009fd3cf734","sha1":"0150554253f97a2b21e2168d6b1672acdfb20fb3","sha256":"25f5af6c5e15ac20aa72101de35bb71c3cffc2226e34368da40e6b9586e1a3b4","sha512":"ab26baef0206221329a86e4a899661dc3f2cfbf5e45268595f4e3acc20168d3c322d2efe301d95e67f5e5bd1eafca1a3de8e7221c3f0e9ab3cd2573e5d05ab10","ssdeep":"768:XklFRAczXAVeZZ7hjl5FFCcjLaHDMRxG4cocJFDdzc887dq+cycD0c8sSDcpc+co:UnA0ZZ7L5FfjWjGAP+AaAiHrheL","tlshash":"a38396d6595bc4d98d1211cde473e909e4a80923cdacf2a3aa7cedc1740dfa2c94763b","size":83636,"data":"","first_seen":"2025-12-31T16:59:12.270672Z","last_seen":"2026-01-07T07:57:20.708596Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/73bc2fc3-789d-48e0-bb7a-92b5e98dbb38","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"swissborg.click/styles.css","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:52.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swissborg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 04:39:55 GMT","end":"Mon, 30 Mar 2026 05:37:39 GMT"},"fingerprint":{"sha1":"D3:A4:8C:B5:CC:5C:9F:84:35:D1:03:15:D0:21:27:C5:D0:CA:AD:FB","sha256":"CA:B3:86:64:A0:8F:BB:96:4B:DB:A3:60:F0:71:B4:67:DB:11:18:03:09:72:7B:3E:ED:D1:9E:C8:47:26:C9:F9"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: swissborg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swissborg.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 07:56:52 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:49:48 GMT\r\netag: W/\"695367fc-364d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zR2UVo2K%2BA65tmEkLxRXojdcZa040tSgUgZCkcMbUOf%2F81Ocz0NVEgZg5NCvcoH8YrMxYOOeLlASa0S7uBPuw%2BL%2BOPxN86PCQrjr7I8OIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba1e6ac0b11723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13901,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"757834b100490aeecc474d345e048c5f","sha1":"aa84bd505aa69b313558a41eec3f1b5a72a764d3","sha256":"9fa0105ce5b01053c6d0c992657b857655eecddef923547541138d42850ddd19","sha512":"634a420ee0cb2e230e15e98a337a893bfbd68e3172cc01ad8ba69bfc46d9b66fa2ed1f6dae31362922dc388c8d8d1487cd7fb4b8ca8d6743cd2429395bebdbd6","ssdeep":"192:HNLyj6Ujq4bZZTQls4gS6c+nkjuPi+H9nIuSlKbYhJL+guh4IAO/sOYYr/lhYixX:hl4PANJi4Ih0Wr//FlKt8ZTG9wIu5","tlshash":"8752ed592a631500a95b94987ff753942338c003cd0ecd6c7bcea658cf8e2e5e992f8d","first_seen":"2025-12-31T16:59:12.267584Z","last_seen":"2026-01-07T07:57:20.710149Z","times_seen":3,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"swissborg.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoinlausanne.ch/wp-content/uploads/2022/07/swissborg.png","fqdn":"bitcoinlausanne.ch","domain":"bitcoinlausanne.ch","tld":"ch"},"ip":{"addr":"217.70.186.106","port":443,"asn":29169,"as":"GANDI SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:52.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoinlausanne.ch","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Thu, 14 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:CB:54:A5:2D:B9:22:F6:BE:27:62:C4:1A:13:8B:DA:E6:1E:09:37","sha256":"26:82:F4:9F:14:F6:10:B6:12:E1:02:EC:7C:F1:F7:39:72:41:A8:50:26:E1:23:94:4E:46:28:98:24:1E:0C:30"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/swissborg.png HTTP/1.1\r\nHost: bitcoinlausanne.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swissborg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 08:37:10 GMT\r\nserver: Apache\r\nlast-modified: Sun, 31 Jul 2022 16:38:08 GMT\r\ncontent-length: 90599\r\ncache-control: max-age=10368000, public\r\nexpires: Wed, 29 Apr 2026 08:37:10 GMT\r\ncontent-type: image/png\r\nvia: 1.1 varnish (Varnish/6.3), 1.1 varnish (Varnish/6.3)\r\nvary: Accept-Encoding\r\nx-cache-hits: 1682\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 688782\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Varnish:6.3","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":90599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"d73c0cc98dbae0b5a69d9f30cb1a4857","sha1":"84c9af2e6e02ddf267246df3f22d3bc232adcff4","sha256":"c5c2f8c83edcdf63d168ee79e81a4aa762d7f46865b3c1ba1bb36dcc0b55c0fd","sha512":"76f296bf00d04deeaa7193de5d7ecdf433a734e709e54cc59848eb25f2886deefaec7c0b6ad9dbd357b1503a60b1d8bec3374975cbc08d51b5b48b98a2b7b0f7","ssdeep":"1536:CniYKdYgv1UdDdI/xKagmihftLYIN2pTGc2qONFBZ6hQW0L:CiYKdYGGBoIhfOqc2tfBZ6r0L","tlshash":"5d93121174bb0eac2b136660bc365bd887a7c5fda1354ef300b2290c489f719b673e1a","first_seen":"2025-12-31T16:59:12.279104Z","last_seen":"2026-01-07T07:57:20.713511Z","times_seen":3,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":107,"dns":25,"connect":36,"send":0,"wait":37,"receive":76,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/thumb/9/92/Civil_Ensign_of_Switzerland_%28Pantone%29.svg/250px-Civil_Ensign_of_Switzerland_%28Pantone%29.svg.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:52.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 07:10:52 GMT","end":"Sat, 14 Mar 2026 07:10:51 GMT"},"fingerprint":{"sha1":"2F:5C:84:59:D5:30:00:E0:37:A2:1D:EB:D0:9C:0C:C7:A4:17:88:77","sha256":"F5:68:C5:ED:48:C7:A4:1A:86:BA:C6:95:8C:B8:7B:F5:F6:0D:EE:3E:CF:94:35:A3:03:3F:5B:20:B8:51:8B:33"}}},"request":{"raw":"GET /wikipedia/commons/thumb/9/92/Civil_Ensign_of_Switzerland_%28Pantone%29.svg/250px-Civil_Ensign_of_Switzerland_%28Pantone%29.svg.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swissborg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 05:31:04 GMT\r\netag: e383db202b0d71e6298702308829b2b4\r\nserver: ATS/9.2.11\r\ncontent-type: image/png\r\ncontent-disposition: inline;filename*=UTF-8''Civil_Ensign_of_Switzerland_%28Pantone%29.svg.png\r\nlast-modified: Sat, 30 Mar 2024 10:48:44 GMT\r\ncontent-length: 421\r\nage: 8748\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/4\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=ZcW9_b0PDCzgDbSioUa4zgLhAAAAAFvdf3vOciQElY4zQVGtkbBPesJOpuGsnPOa;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 07 Jan 2027 00:00:00 GMT\r\nx-request-id: 72768162-d88b-4964-bcce-f546ff0b3bc0\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 167, 4-bit colormap, non-interlaced","md5":"e383db202b0d71e6298702308829b2b4","sha1":"4d756448ea88f213cb47d788369732555d0f33ff","sha256":"5cc898117886d5bb09b22c970a1735a6ad67f09967b3335542d497216993a70b","sha512":"cf3d579e010439a650741b2c1e1df8665814b811de3c0c16a5cc8c2bfc46299ae6c3d2ffd0c7c95b95ce091d20d3f67c0bbe489a7e16a287bc2b91a07730ea33","ssdeep":"","tlshash":"8ae0a3d17d11d610c14b2b1a02514680e9326876771a72c9542cd9082d4fecc565b5d7","first_seen":"2025-12-31T16:59:12.281447Z","last_seen":"2026-01-07T07:57:20.715844Z","times_seen":3,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":116,"dns":55,"connect":23,"send":0,"wait":24,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"website-media.swissborg.com/2025-07-23T12-05-05.512Z-auto_invest_1080p.webm","fqdn":"website-media.swissborg.com","domain":"swissborg.com","tld":"com"},"ip":{"addr":"172.67.163.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:53.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c7a819f2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 18:10:00 GMT","end":"Sat, 07 Feb 2026 19:09:57 GMT"},"fingerprint":{"sha1":"D6:99:18:06:C3:53:26:D8:38:2C:F3:EE:58:2C:C4:4C:2D:3E:D1:C8","sha256":"71:10:94:51:04:73:5D:6B:53:FC:30:94:6A:DB:12:48:68:63:F7:12:A3:AD:52:86:F2:91:FF:E5:BB:AC:6B:51"}}},"request":{"raw":"GET /2025-07-23T12-05-05.512Z-auto_invest_1080p.webm HTTP/1.1\r\nHost: website-media.swissborg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swissborg.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 07 Jan 2026 07:56:53 GMT\r\ncontent-type: video/webm\r\ncontent-length: 5156368\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4nV9xa91Ctiff5EPyhapID1WDXfGFgItKuK00to%2B8UrwqnGuEr86VtjL8afd8eYHMCFhGmfsmQE90lSqoVNNpWSHn89q0yDly9FNrTE3ZN8u1aEnQtadWU%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\netag: \"c79d87251f136af76c58751a255d53dd\"\r\nlast-modified: Wed, 23 Jul 2025 12:05:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 0-5156367/5156368\r\ncf-ray: 9ba1e6b0dc89568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5156368,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"99c07219004eb6cff30a1f0226bbc5ae","sha1":"f530b5f5c3cdc1613454c46c0842b1acb2c6431d","sha256":"732a8eeb5fdd8910611de37358051ef80904d89ab0d340d898be0ba28ec2bb04","sha512":"5ea037fc98eca3641ea7a6e535fef350b34baa2a5a9d1b64b57b111862bfc1a60004d01b5c7fd18f658edaa68a180734e5aef7a2bac9f08134cc881698b24fe3","ssdeep":"24576:depmn2G1kS74GK10FCqFAUTmuRD/+cKyrYjs/zW+pDCHKiX1l/:dquhg0fcuFm/s/zrYqiD/","tlshash":"1725233d08b44664ec4b713d22857fd41a765678dbe3ce9132ec4b3acaa9f51a20dcd2","first_seen":"2025-10-03T04:16:09.675201Z","last_seen":"2026-08-04T02:14:45.716214Z","times_seen":9,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":82,"dns":26,"connect":5,"send":0,"wait":53,"receive":663,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/secureproxy?e=jscdn/getFile","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:53.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swissborg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 04:39:55 GMT","end":"Mon, 30 Mar 2026 05:37:39 GMT"},"fingerprint":{"sha1":"D3:A4:8C:B5:CC:5C:9F:84:35:D1:03:15:D0:21:27:C5:D0:CA:AD:FB","sha256":"CA:B3:86:64:A0:8F:BB:96:4B:DB:A3:60:F0:71:B4:67:DB:11:18:03:09:72:7B:3E:ED:D1:9E:C8:47:26:C9:F9"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: swissborg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://swissborg.click/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://swissborg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"s5mtmesb31ylih6x5gnk\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 07:56:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BHp5zcx8dtWnRJczaN4PzJv8sB4i4A3NekFid72uMOaU5pEFYwcsAL8kaM%2FUkaWj16WMmJu%2FF%2FhhVMiGe%2FXXdnxQM7Rup2fl5rxZktr3km7fA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9ba1e6b05b88723c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6379219,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e0c381923ed9c876b5a0e7b7b7ba535a","sha1":"61369d834f168ab269a05ef6d4c6fd53e45da397","sha256":"a94c75432a1c5165d113e59a82bf6a06d88ba74a64dc72be74fa4bc708ffe4b9","sha512":"6e4ea6b10c2079b1c7c95d81080946cb1dcce04865ecc5925ec9d2b7de7cb6d5764df42ef0648d957d56e578f1b3417ca57d2f7b4840be789482d9b94d032916","ssdeep":"24576:XZ3BF0E7dTIKiPbNCRDz3RYpzqCRbPvSHGBfP:9paKiPbNCRPBYpzqCRbPA+P","tlshash":"6e2512c6b405e09237148876b7f32ddd99a9504ff8e946733b45ae98604a4e0c7ecbe3","first_seen":"2026-01-07T07:57:20.284628Z","last_seen":"2026-01-07T07:57:20.721782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1369,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":796,"receive":572,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"swissborg.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/favicon.ico","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:53.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swissborg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 04:39:55 GMT","end":"Mon, 30 Mar 2026 05:37:39 GMT"},"fingerprint":{"sha1":"D3:A4:8C:B5:CC:5C:9F:84:35:D1:03:15:D0:21:27:C5:D0:CA:AD:FB","sha256":"CA:B3:86:64:A0:8F:BB:96:4B:DB:A3:60:F0:71:B4:67:DB:11:18:03:09:72:7B:3E:ED:D1:9E:C8:47:26:C9:F9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: swissborg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swissborg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 07:56:53 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:49:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZLaSah%2FNGRRoZLg%2F7lEtWKeNrB%2FjOZtut4v4MoBOEUzeOUIzYxV%2FRp%2BU%2FIlNePhvvru2aoKTPOLZyKKfcLRYw32dEsD%2FMB1O5%2FpMpInmg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9ba1e6b26bd0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9640,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2b7ec369e1cb7f3e4c1c964c0ce6b354","sha1":"228d3d7a648d21242500535cfc453ee38afb0197","sha256":"49dd4a7d9d761d84c0fd808474fc69a295e409587ab4e84370b076fb47c270a5","sha512":"4d881817e55ae8280f30bf097488476fa0260cc3081ab54ebdd761e4c94ffc6afbdcc556b80102749f89f12d401e49c764bcbfe49451c01d6e0c6b35307b6207","ssdeep":"96:LyGHu4l7/WsXIdtm5xHU9SP1PzDFMozR9epLYNWh11SY51zs:+GFJxeU/UgP1PzDFMozR9epLYNWhHSg4","tlshash":"2012ce7128c6192763b7c3955931e75afe928083c68ea58436ed07cb4ff3e418c4b6a7","first_seen":"2025-12-31T16:59:12.264039Z","last_seen":"2026-01-07T07:57:20.720327Z","times_seen":3,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"swissborg.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T07:56:51.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swissborg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 04:39:55 GMT","end":"Mon, 30 Mar 2026 05:37:39 GMT"},"fingerprint":{"sha1":"D3:A4:8C:B5:CC:5C:9F:84:35:D1:03:15:D0:21:27:C5:D0:CA:AD:FB","sha256":"CA:B3:86:64:A0:8F:BB:96:4B:DB:A3:60:F0:71:B4:67:DB:11:18:03:09:72:7B:3E:ED:D1:9E:C8:47:26:C9:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swissborg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 07:56:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:49:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qx09tPdyFr5lUPfoXwpmiyHpIcehUymj8xGh%2Buj8%2BBWDrRUmHA8jrWcxnktCpzTCUoLN5SyWA8gh9tSh%2Bg1jIBPQv3Jp7ZMReTh3gBofMA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ba1e6a8481349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9640,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2b7ec369e1cb7f3e4c1c964c0ce6b354","sha1":"228d3d7a648d21242500535cfc453ee38afb0197","sha256":"49dd4a7d9d761d84c0fd808474fc69a295e409587ab4e84370b076fb47c270a5","sha512":"4d881817e55ae8280f30bf097488476fa0260cc3081ab54ebdd761e4c94ffc6afbdcc556b80102749f89f12d401e49c764bcbfe49451c01d6e0c6b35307b6207","ssdeep":"96:LyGHu4l7/WsXIdtm5xHU9SP1PzDFMozR9epLYNWh11SY51zs:+GFJxeU/UgP1PzDFMozR9epLYNWhHSg4","tlshash":"2012ce7128c6192763b7c3955931e75afe928083c68ea58436ed07cb4ff3e418c4b6a7","first_seen":"2025-12-31T16:59:12.264039Z","last_seen":"2026-01-07T07:57:20.720327Z","times_seen":3,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":69,"dns":50,"connect":3,"send":0,"wait":260,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"swissborg.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/app-240890c41a725aec.min.js","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:52.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swissborg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 04:39:55 GMT","end":"Mon, 30 Mar 2026 05:37:39 GMT"},"fingerprint":{"sha1":"D3:A4:8C:B5:CC:5C:9F:84:35:D1:03:15:D0:21:27:C5:D0:CA:AD:FB","sha256":"CA:B3:86:64:A0:8F:BB:96:4B:DB:A3:60:F0:71:B4:67:DB:11:18:03:09:72:7B:3E:ED:D1:9E:C8:47:26:C9:F9"}}},"request":{"raw":"GET /app-240890c41a725aec.min.js HTTP/1.1\r\nHost: swissborg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swissborg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 07:56:52 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:49:48 GMT\r\netag: W/\"695367fc-146b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WZFMaj2Lew3HUxjYR9ZiHQm8WsguZUSDWI9Zg6n3sYHh7tRp3haysrVzXCfzJqgfFwCvEz7CoWzpHaTxG3Ff0Zu6FsAaRvqOszEUDc8gA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba1e6ac0b12723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7a01a75131ad4ac62effe009fd3cf734","sha1":"0150554253f97a2b21e2168d6b1672acdfb20fb3","sha256":"25f5af6c5e15ac20aa72101de35bb71c3cffc2226e34368da40e6b9586e1a3b4","sha512":"ab26baef0206221329a86e4a899661dc3f2cfbf5e45268595f4e3acc20168d3c322d2efe301d95e67f5e5bd1eafca1a3de8e7221c3f0e9ab3cd2573e5d05ab10","ssdeep":"768:XklFRAczXAVeZZ7hjl5FFCcjLaHDMRxG4cocJFDdzc887dq+cycD0c8sSDcpc+co:UnA0ZZ7L5FfjWjGAP+AaAiHrheL","tlshash":"a38396d6595bc4d98d1211cde473e909e4a80923cdacf2a3aa7cedc1740dfa2c94763b","first_seen":"2025-12-31T16:59:12.270672Z","last_seen":"2026-01-07T07:57:20.708596Z","times_seen":3,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"swissborg.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swissborg.click/app-240890c41a725aec.min.js","fqdn":"swissborg.click","domain":"swissborg.click","tld":"click"},"ip":{"addr":"172.67.193.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swissborg.click/","date":"2026-01-07T07:56:52.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swissborg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 04:39:55 GMT","end":"Mon, 30 Mar 2026 05:37:39 GMT"},"fingerprint":{"sha1":"D3:A4:8C:B5:CC:5C:9F:84:35:D1:03:15:D0:21:27:C5:D0:CA:AD:FB","sha256":"CA:B3:86:64:A0:8F:BB:96:4B:DB:A3:60:F0:71:B4:67:DB:11:18:03:09:72:7B:3E:ED:D1:9E:C8:47:26:C9:F9"}}},"request":{"raw":"GET /app-240890c41a725aec.min.js HTTP/1.1\r\nHost: swissborg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swissborg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 07:56:52 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:49:48 GMT\r\netag: W/\"695367fc-146b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OyEBE5rp6zdKwvUeeCaqX3rIH6wpspW79rOyuO%2FI8KTdhXJF71iJ8oaoDMx0GSRNC%2BKzuL6tIkgRGyc9MdN2oPCkEoNZ601QfWb9lNTZjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba1e6ac1b13723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7a01a75131ad4ac62effe009fd3cf734","sha1":"0150554253f97a2b21e2168d6b1672acdfb20fb3","sha256":"25f5af6c5e15ac20aa72101de35bb71c3cffc2226e34368da40e6b9586e1a3b4","sha512":"ab26baef0206221329a86e4a899661dc3f2cfbf5e45268595f4e3acc20168d3c322d2efe301d95e67f5e5bd1eafca1a3de8e7221c3f0e9ab3cd2573e5d05ab10","ssdeep":"768:XklFRAczXAVeZZ7hjl5FFCcjLaHDMRxG4cocJFDdzc887dq+cycD0c8sSDcpc+co:UnA0ZZ7L5FfjWjGAP+AaAiHrheL","tlshash":"a38396d6595bc4d98d1211cde473e909e4a80923cdacf2a3aa7cedc1740dfa2c94763b","first_seen":"2025-12-31T16:59:12.270672Z","last_seen":"2026-01-07T07:57:20.708596Z","times_seen":3,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"swissborg.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}