{"report_id":"7ddd1c34-a531-44d8-90e4-62929c4f5382","version":6,"status":"done","tags":[],"date":"2026-01-27T12:53:58Z","url":{"schema":"http","addr":"malgoswap.org","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"104.21.11.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"malgoswap.org/","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"title":"Malgo Exchange - Anonymous Cryptocurrency Exchange | Trade BTC, ETH, XMR \u0026 More","dom":{"size":55329,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47265)","md5":"d05bc5aa8406809e1dbfebdc4363b9cd","sha1":"2c2c5782a6c0932e64497b3cdcd7529cb2db7b71","sha256":"c4a2518fa3d70cff8bd207c458ad409a99de42aef710640bbe13bb90e63ddb91","sha512":"61a94c4e15da4b25e3a2ed1ab2aebc3836086d2260f9b20fe91cc7d0aaf806a72fed27b29c026c546282c3643d4fc2c0d89ba2a43b60c7c0ad6810e682196c40","ssdeep":"768:tbCHpqIJZX33WqE7lxSazKGa10uBUyH9w7ETWytX33WqEFIy4WB2AZyxV0a:tUqILGD7DydLhGDmy4Wu","tlshash":"7c43f6ba5351457f865383d8f2b1b77c705a928add1b8c4cf3bc069537c6c4d8c22a96","dom_hash":"domhash9db1f755bed4d21a48896c43492015b1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"malgoswap.org","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"104.21.11.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T12:53:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":18934,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-01-21T11:04:38.331878Z","alert_count":0,"request_count":10,"received_data":30447,"sent_data":4942,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":3,"received_data":123717,"sent_data":1644,"comment":"","tags":null,"fingerprints":null},{"fqdn":"malgoswap.org","ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":26,"request_count":26,"received_data":1131597,"sent_data":11451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"malgoswap.org/assets/reserves-gsquIYIW.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bd363471e30e76e43deffd896616cd84","sha1":"12b147dcbea674960034e7d91b206bb6c6b1bb95","sha256":"93a1a9e4b5dcb09680f68a091ee7f267d5e173ea39591d570332b8d9393447a5","sha512":"31ae04a2201376ec0c9dd089dd40758c342578d413a94a31a31940b38cddcb68ea289e30bf2c479315358a6b8493e3c591e7a0359287c9cf1b4b5191982e1f92","ssdeep":"","tlshash":"e341f155aa61f26f40b3bdccdd181410822d646c356e9497bf7828c2f940e02667ebb9","size":2188,"data":"","first_seen":"2026-01-27T11:14:45.08893Z","last_seen":"2026-02-14T06:50:44.78963Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/index-DSy7ZsHL.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a137a79c3591dbf632cdf414901b8a","sha1":"babc3571484aef93c60f8b1db8e8a1c69271d690","sha256":"6caeaa4234b194ff718afd9a8ba792acdb43ed455c51c2d4cd4ebc140d74dbb1","sha512":"8c8e1788618b933d4a8cdb7f66967e5cb81d47248ee083661055676c4278fd63a1ef691321754eb881aeb2a94443bcd5fbfeb9397bab8d6789488962469455cf","ssdeep":"6144:zD0GF0OTY49XO3X+R50J8o+yNFwOvDzFpKOZ2b8lOp9v6JrDJ:ko0I/9X1R50XNNW4aOQolD","tlshash":"99a44bd872a5b2655be345e4407f0203723a2d66340c84a4f23dedea3a7444a65bbffd","size":484932,"data":"","first_seen":"2026-01-27T11:14:45.09169Z","last_seen":"2026-02-14T06:50:44.815464Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/addressValidation-DVU3KpOv.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c5971ad74fbe5506969757da5c4e7648","sha1":"79c3bc11e425ad7e51ace4ffa710fd7bf7b71f6b","sha256":"358b1f2de3558530db78a5b4568e30debd27153bd8171308615ac1fa2c05ab19","sha512":"bb493486e9c2352736bd18d5414bf429a69bedce0106f5b60e4173e4ccbebf0b2d106867aec309ad2a80df66ef3928cd448e551734421d5e5ab17b5d270e7294","ssdeep":"","tlshash":"a55121c4f7ebf0a513f118de2cc695175efcf7a4702d2428b00ac4526974499abbbac5","size":2682,"data":"","first_seen":"2026-01-27T11:14:45.069828Z","last_seen":"2026-02-14T06:50:44.797561Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/LoadingOverlay-uM1vlHv6.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3d732e1058bb35567033c0216cb0b724","sha1":"cb8b5de0774613480eba662716e34fcb86e33324","sha256":"b18fd582ae88cdd2c9f1f9ea38fca3a04630c73aeea52d121bc8d7381ceada5e","sha512":"d0ea202f44adbf3978356727e1a23201e37ed288510195262835dda7fdb569bbb0d025efcb0327b9f381956386b19812ac3ed05cca9a9ad83e353acdcf1a59a5","ssdeep":"","tlshash":"b131025e91076bed86970ce4f85f900a613f8cc4ef3f4cd4e0b8600a27900ad691b7d5","size":1773,"data":"","first_seen":"2026-01-27T11:14:45.086573Z","last_seen":"2026-02-14T06:50:44.782993Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/arrow-right-B-_6qrd0.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7bf2684d95c9540f495b149307534bb4","sha1":"3118ecb2118acf1a6b8f8f897dc288d0f51b6821","sha256":"7bbd7b891ee84d7cddd5a84d0ffbbdee2609ef4bbc78cffae220b4d973e09b2d","sha512":"044b407821864a68f8d2507299162beb8b1d8d592a3e78771fcde14f78106257c81bfe52b02be49278a02dc5d6a843ce53e2e95ccbb40e502f3498d314667f2a","ssdeep":"","tlshash":"51e07d5f2ec063b3029184ad2f4be5ca471c15ec836f7650741683ad86300df86dded0","size":338,"data":"","first_seen":"2026-01-27T11:14:45.076795Z","last_seen":"2026-02-14T06:50:44.787767Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/index-C05VmP94.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b21e98840d55420fa92f568acb30bd","sha1":"8ea0ff34e1ecce63cdd1c3e994190daab3c29488","sha256":"86311044083cad654462be70d4538e791f3eea97105b8838cf6a0f72056f0e93","sha512":"d44226c0eeedf5857a146edba403ebc122856fa6759a40d19667fa0cefe844beef0f5831768fbe1acc333b189e1d0073bdcf44e16d2463e098e1800224bf06ec","ssdeep":"1536:jL466/qw4yreDUuXaEygYIrdBkNdpvFkgWIG4v1Kx8zuCMzvb76PTfB+eYXBBdK+:Bb5QiTkYWyZEJG+I","tlshash":"b234d8eeb7d4b3f4e447f7f0d82650a5761b28fabb67cf64c3a99d44a64105c8889c80","size":242432,"data":"","first_seen":"2026-01-27T11:14:45.068524Z","last_seen":"2026-02-14T06:50:44.798608Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/currencies-CuzGmkPb.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0a8544f152db3c08dfb03e6cdf734781","sha1":"1468ebe8977a0ca4f448259b242839a04f7a12f4","sha256":"4a39631615777b2222de2bb319cc240b086ff9e7ece8af21c56a5160bc29a18c","sha512":"e713196549037210d0c8d45a16bd8b234b45af324b55ffaaf89ce9f25b4eebd3a17b8ec72496ce7df871d75b0e51f992fb3f9b220828f26bd446869c8f142d2d","ssdeep":"","tlshash":"8f51cfef95a38c540f21e4eba23070dde079659dfca2e4dabbd4400852f538664a0fb3","size":2809,"data":"","first_seen":"2025-12-29T12:30:45.838649Z","last_seen":"2026-03-20T19:18:18.608824Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/chevron-down-BoN6nKvH.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ae7415231580c1607b9b2764bb3a447a","sha1":"67ba100cea8bb636d5b626c247a89940ae3f9ec8","sha256":"2c157c10b66abe197dcf56a1b82385261fcbbbf3c7b419331d1b2e26cdc9eadb","sha512":"136de65bbdf3e134271d48787201ebe402137a0f0c59332fa93ce1a7273d508a37a4522c73fdfa4e48c8d24a7d3ae5ad1fbaed027d6f800f459c90bc9fb30d18","ssdeep":"","tlshash":"4ce0cd2f26602273016548683b4fe6ced71915dc975e7354a412832d85305df42cddd0","size":301,"data":"","first_seen":"2026-01-27T11:14:45.073545Z","last_seen":"2026-02-14T06:50:44.804074Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/arrow-down-up-k9Xe6Z3z.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5c521a92d1f6a70ffc3d81ecff421e2d","sha1":"ede9524225618ca8453e80851dd911f7fd44d4a5","sha256":"b0ef6c5fceab1d259660c5ee00c2af4f37cd6f0fdb2c01d7a142ee82c6a425d8","sha512":"82cbf87dab2cee4dc3aae9f152c289e16fd7ebbf96d43e82d7ccb07bb941779f032f01c1c3fda5001404cd6b4de83c3c9f81ca5453eb672d400d77acdff62d88","ssdeep":"","tlshash":"07e02b1b1a80637305a1d5ac1b8bf9856e9916fd939f7a51b8134379d73045f49ccfc0","size":418,"data":"","first_seen":"2026-01-27T11:14:45.067395Z","last_seen":"2026-02-14T06:50:44.799613Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/loader-circle-CMcDfjan.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"71afef50f4275c150288462b2990f2b0","sha1":"6d0728616ca4bc7411a1e81109839a771db39453","sha256":"97cd475a5dc969055aef17f4526be8512be7e7698a550add5427f3d40d232298","sha512":"14cbf50e000c62e816b6052f7c99ed763c5abc3f824757cad795ea2518dfa32a62ce733196f7f02935d09f36c64356b5c6165d6d01a7e315d4523ca1e5f1e118","ssdeep":"","tlshash":"3ae07d2b1e6413b301938c781b0ae6c96b051599435e33a07011832c89310efc2dfdc0","size":312,"data":"","first_seen":"2026-01-27T11:14:45.072368Z","last_seen":"2026-02-14T06:50:44.785875Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdc.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdc.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b183d6d3f5636c8fb1f970cbcfd6486123334daf293bf5684e171c84d2122df0\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 3521:1D9591:34DC4B:3A456B:6978B516\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.309194,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: adeb977ba2613a67b468e32be08d016eea5c2b50\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 59\r\ncontent-length: 1152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":2414,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cb90f28a9ed0e48cab17dbdd7c99ec1","sha1":"424fa9ae05a1f82d6bb56a3162c57e26f71b1396","sha256":"811778b340917467c0bb54ba30263deda1e1c4f039a8b2e838236cc0183ec602","sha512":"181afaf94a26ab1bc8acded7ccf4dcf01db578d6b810f1941621ece279a3e266e9fd7e4f0cf6975239876064892c64181488f39013cd97925577628d3fb9da14","ssdeep":"","tlshash":"d0415651a278751e7c5b876aebf0a0e5531f50fe31eac145a9de8b08a01bad2b246d40","first_seen":"2023-11-29T10:09:34Z","last_seen":"2026-06-06T23:49:41.806227Z","times_seen":22,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://malgoswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 16:33:50 GMT\r\nexpires: Sun, 24 Jan 2027 16:33:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245987\r\nlast-modified: Wed, 10 Sep 2025 16:52:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-06-13T01:34:39.456907Z","times_seen":2146,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":87,"dns":0,"connect":10,"send":0,"wait":8,"receive":4,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T12:53:36.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 12:53:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTyoMHz9tUlkEqBu0JD%2BC98TDGV%2B01rso1LQGKplpmoWVI3KLjEgusJgnOMO8V5ktqjjEc6RQFZMgXcSSxKWgDBNuyZyygnwJd%2BwUiw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c4864d71a095a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6503,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"741ef5ab78d6f33949e00395a7215a5b","sha1":"7ece3d6dc47dabd0abe3dba31d29320e78fa8a50","sha256":"d0fc6d762724a7eaddd5c7466259ebef1294712397a32c38cc3c2bf362842ee5","sha512":"f3ade88a530f8ea47200a4e1e14322d81dae33267003c438c026fea14d6b1eb641407835559800ff5b210beac9657cfe09fe4117b690f0021917ff90a11f4973","ssdeep":"96:XTJ4M7IshzjM7IsCAZUSiM7IsB7d0r0L/VMk3Bk3RHk3/I8i4:XTJxhmD3JT+OBORHO/I8T","tlshash":"0bd100a79a80487603b141646af2f10dea2f428bd2191e0673bc55ef0ff29d1c5e7b5e","first_seen":"2026-01-27T11:14:45.084308Z","last_seen":"2026-02-14T06:50:44.819275Z","times_seen":8,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":41,"dns":10,"connect":3,"send":0,"wait":67,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/currencies-CuzGmkPb.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/currencies-CuzGmkPb.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhmJSanP0ZTUPrWuodk3u1hTtBGug2zv8Q%2B4vJ034jtq61yAVjnvPqGXckY03fUt1Si5mdSGJqyVRoDa33VW9B6cO09LSh1xHAs8pPo%3D\"}]}\r\ncf-ray: 9c4864da8a181a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2809,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2808)","md5":"0a8544f152db3c08dfb03e6cdf734781","sha1":"1468ebe8977a0ca4f448259b242839a04f7a12f4","sha256":"4a39631615777b2222de2bb319cc240b086ff9e7ece8af21c56a5160bc29a18c","sha512":"e713196549037210d0c8d45a16bd8b234b45af324b55ffaaf89ce9f25b4eebd3a17b8ec72496ce7df871d75b0e51f992fb3f9b220828f26bd446869c8f142d2d","ssdeep":"","tlshash":"8f51cfef95a38c540f21e4eba23070dde079659dfca2e4dabbd4400852f538664a0fb3","first_seen":"2025-12-29T12:30:45.838649Z","last_seen":"2026-03-20T19:18:18.608824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/LoadingOverlay-uM1vlHv6.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/LoadingOverlay-uM1vlHv6.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cW4Ayw%2F%2BrI7%2F43%2FyMmTON%2FhS4bUlmpcRmQ3DsB6UV7H2fO1gMmeeE4TXesR69b3971LLc98RqFZ7B5eUVeQLSkyj4qit%2BRjzIunmfw%3D\"}]}\r\ncf-ray: 9c4864db2a2d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1772)","md5":"3d732e1058bb35567033c0216cb0b724","sha1":"cb8b5de0774613480eba662716e34fcb86e33324","sha256":"b18fd582ae88cdd2c9f1f9ea38fca3a04630c73aeea52d121bc8d7381ceada5e","sha512":"d0ea202f44adbf3978356727e1a23201e37ed288510195262835dda7fdb569bbb0d025efcb0327b9f381956386b19812ac3ed05cca9a9ad83e353acdcf1a59a5","ssdeep":"","tlshash":"b131025e91076bed86970ce4f85f900a613f8cc4ef3f4cd4e0b8600a27900ad691b7d5","first_seen":"2026-01-27T11:14:45.086573Z","last_seen":"2026-02-14T06:50:44.782993Z","times_seen":8,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/chevron-down-BoN6nKvH.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/chevron-down-BoN6nKvH.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxNCxRRLrL5JQadY9ztQjsN7vxt%2BnDcUtrzEENCKUlUz%2Fqqm7cul4GR0caY%2BQW9C86iDNQYj21s4y%2FL4TYv2pHiIpPf6JhUdkgCZXWg%3D\"}]}\r\ncf-ray: 9c4864db3a2e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ae7415231580c1607b9b2764bb3a447a","sha1":"67ba100cea8bb636d5b626c247a89940ae3f9ec8","sha256":"2c157c10b66abe197dcf56a1b82385261fcbbbf3c7b419331d1b2e26cdc9eadb","sha512":"136de65bbdf3e134271d48787201ebe402137a0f0c59332fa93ce1a7273d508a37a4522c73fdfa4e48c8d24a7d3ae5ad1fbaed027d6f800f459c90bc9fb30d18","ssdeep":"","tlshash":"4ce0cd2f26602273016548683b4fe6ced71915dc975e7354a412832d85305df42cddd0","first_seen":"2026-01-27T11:14:45.073545Z","last_seen":"2026-02-14T06:50:44.804074Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://malgoswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 16:33:50 GMT\r\nexpires: Sun, 24 Jan 2027 16:33:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245987\r\nlast-modified: Wed, 10 Sep 2025 16:52:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-06-13T01:34:39.456907Z","times_seen":2146,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":60,"dns":1,"connect":7,"send":0,"wait":9,"receive":9,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/api/auth/get-session","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /api/auth/get-session HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bi3hlmY%2BaoZitIP67V9H6IMclvzIGyUufnBKH3uXf5YxeDG33lJ8DR2HRwcsjnDqzj1kXpNzJFzEOTBkf616DaHqjvGZK34Ox5iaKeg%3D\"}]}\r\ncf-ray: 9c4864ddea771a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-13T09:50:06.866737Z","times_seen":258923,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/api/auth/get-session","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /api/auth/get-session HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yK6JJfePuybKWi3GnuRxBDZ8HDpMhsiPsw31gjyfpS%2Br8V%2FZ%2BsVE5H3JzarKd51MJK2n4Bb650Ntb95tIlg4w5c9nqbB3HwI7qsnHkU%3D\"}]}\r\ncf-ray: 9c4864daba201a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-13T09:50:06.866737Z","times_seen":258923,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/arrow-down-up-k9Xe6Z3z.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/arrow-down-up-k9Xe6Z3z.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGSqBbscl5MVcnuzSPnOTlf1J6NjPRjEL6LbUu06FKKvJXBNSw8KeHAazB%2B%2BYOf9Gm2nirHMdEmfrOPlcOHdjShF0U%2BmO78ZTYR985A%3D\"}]}\r\ncf-ray: 9c4864db3a321a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"5c521a92d1f6a70ffc3d81ecff421e2d","sha1":"ede9524225618ca8453e80851dd911f7fd44d4a5","sha256":"b0ef6c5fceab1d259660c5ee00c2af4f37cd6f0fdb2c01d7a142ee82c6a425d8","sha512":"82cbf87dab2cee4dc3aae9f152c289e16fd7ebbf96d43e82d7ccb07bb941779f032f01c1c3fda5001404cd6b4de83c3c9f81ca5453eb672d400d77acdff62d88","ssdeep":"","tlshash":"07e02b1b1a80637305a1d5ac1b8bf9856e9916fd939f7a51b8134379d73045f49ccfc0","first_seen":"2026-01-27T11:14:45.067395Z","last_seen":"2026-02-14T06:50:44.799613Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/reserves","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /reserves HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: application/json\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLrr0Uxr9OTdnaQlSz5Sgga0eidrdegnbO2GXzm99YtEzzv%2Bh69ta8aZcRsSuOYJQSkrD22rQWhmr0mbk1540E1r79t%2Bd66X5rxtbUU%3D\"}]}\r\ncf-ray: 9c4864db7a3a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1757,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"727d92dabaa98e9d5877784485dad83a","sha1":"9ae8ebb3448147aa556853cc3b58c4d5c30fca70","sha256":"9f0160522268ab8f27fc0a32969d52bddb08f3596aa90284990172548f067796","sha512":"fad23b210cbb4e4fec59ff95abe61cab2d3ee66ca849c1f12b8463806fded202815b2cf042c07db8e7b2068407b09df5eb04b5786a98509dbf5c3341a25c596d","ssdeep":"","tlshash":"d4319636ff5aaeb0d7332c487e1d32757e39bbb064c28ca0108b9d58032a7715913d56","first_seen":"2026-01-27T11:14:45.07865Z","last_seen":"2026-02-14T06:50:44.805389Z","times_seen":8,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/master/128/white/sol.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/master/128/white/sol.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"fa53ff5eb26f780925dabed1f4a37c71cb9fc628eba35a10a1e59a9c97ae8ae0\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: DB48:217EC6:34038F:396C4D:6978B516\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.337016,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 37f49354c447f955e661addce39b4d636c8341aa\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 59\r\ncontent-length: 3540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":3540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4c8330feb125e95cf717ee3c510cded9","sha1":"455c69c1a043b41d39ec82325feb1aeef8eabd46","sha256":"081c8ba38d1f73d611fdd9bfe110fc6f41bceccce11496cad58b93c7206611b3","sha512":"cd22b172079fdd01c68f0a207dff19c18d3c53c1e6953f10d95414f8dc7195930efb5b39d5299052ae00ce46f737c0c333685d60612d5f6030e6f365504f9edf","ssdeep":"","tlshash":"2c717cc1eda8198ac6024d7783ccff393ed180a88ad0a041c5090e94da8cb599fa564e","first_seen":"2025-08-08T05:26:47.560564Z","last_seen":"2026-03-20T19:18:18.621394Z","times_seen":17,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":61,"dns":0,"connect":29,"send":0,"wait":16,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://malgoswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 16:33:50 GMT\r\nexpires: Sun, 24 Jan 2027 16:33:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245987\r\nlast-modified: Wed, 10 Sep 2025 16:52:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-06-13T01:34:39.456907Z","times_seen":2146,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":88,"dns":1,"connect":10,"send":0,"wait":12,"receive":5,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/index-CpzlI02C.css","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:36.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/index-CpzlI02C.css HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/css; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:16 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljD6g%2BEunXaCMCna9u7%2FrciwHaejov8ZC018tjCvI2ZjyglH8Rln%2BtTXH32LcmJv3QknMZwoH%2Bs6h8ci3voPAg%2Fvu1Vc9Idt1odyq44%3D\"}]}\r\ncf-ray: 9c4864d899e31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97649,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c02b4993d8665b23f8900fbf10f96d50","sha1":"31f55649057fa43aacf02ba2d19815e16950f37b","sha256":"c67c237764a54bf2f8caf00a99d0e95b8cc5295b4e0cd51956b3bac5a8d18ce8","sha512":"7f7b617d7ded149ee9ceb31bcff45b3bce8dfeb929fb1564bfcb988161960fb1a084038277c7557055d409f0b7ee260ce34c3c98262656cdbc637f82b694c46c","ssdeep":"1536:ikSavZUPr+CuSTJ6bNQF5XwFTd0uql83k5atYp:zvZUPr+CuS96g5XwFTdxql8U5r","tlshash":"c9937270f271d97bbd23b9bd63acf44ca219a1c6dd6297ddfa22601153c37f22862604","first_seen":"2026-01-27T11:14:45.065987Z","last_seen":"2026-02-14T06:50:44.814417Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/addressValidation-DVU3KpOv.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/addressValidation-DVU3KpOv.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whIkty%2B194AiWObTvPuis2b0CGRBSunoVBfp%2F4KRwvWZYIajjygRcE7EoylOyFowmq2K0NpZcfRTaUaKB86hzTz0TX158DIVdbnBrcQ%3D\"}]}\r\ncf-ray: 9c4864da7a161a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2682,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2472)","md5":"c5971ad74fbe5506969757da5c4e7648","sha1":"79c3bc11e425ad7e51ace4ffa710fd7bf7b71f6b","sha256":"358b1f2de3558530db78a5b4568e30debd27153bd8171308615ac1fa2c05ab19","sha512":"bb493486e9c2352736bd18d5414bf429a69bedce0106f5b60e4173e4ccbebf0b2d106867aec309ad2a80df66ef3928cd448e551734421d5e5ab17b5d270e7294","ssdeep":"","tlshash":"a55121c4f7ebf0a513f118de2cc695175efcf7a4702d2428b00ac4526974499abbbac5","first_seen":"2026-01-27T11:14:45.069828Z","last_seen":"2026-02-14T06:50:44.797561Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/reserves-gsquIYIW.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/reserves-gsquIYIW.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RA1J2Oe%2FdSGGHlyqZWBeZ2GudU6Qa95qsBc9kzVVzPrN369LCBjw4CpwbTEJy5owEgLWtb9dGK98BTwj7DfuiYPLe9cqoC1L4Av6ArE%3D\"}]}\r\ncf-ray: 9c4864db3a351a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2187)","md5":"bd363471e30e76e43deffd896616cd84","sha1":"12b147dcbea674960034e7d91b206bb6c6b1bb95","sha256":"93a1a9e4b5dcb09680f68a091ee7f267d5e173ea39591d570332b8d9393447a5","sha512":"31ae04a2201376ec0c9dd089dd40758c342578d413a94a31a31940b38cddcb68ea289e30bf2c479315358a6b8493e3c591e7a0359287c9cf1b4b5191982e1f92","ssdeep":"","tlshash":"e341f155aa61f26f40b3bdccdd181410822d646c356e9497bf7828c2f940e02667ebb9","first_seen":"2026-01-27T11:14:45.08893Z","last_seen":"2026-02-14T06:50:44.78963Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@100;200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:36.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@100;200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 27 Jan 2026 12:53:36 GMT\r\ndate: Tue, 27 Jan 2026 12:53:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18248,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"439fa0c3a18151951b917f4c066d4618","sha1":"6ad61049c20e54cfee23f8ad23b997432c6d49fb","sha256":"c0e8d4ce3bde4bf9a196d76cfde67bf9cec57b502fb9e79463f0471649e165c1","sha512":"6fe5619e74c58c8d79e94dac294052faeef911fb66bd92131aba3b4a7116b2470fdcfe09bb10f1c9f2708b6bcc117a6e2fcec2ec41be116e649163a54c1c03c8","ssdeep":"192:XpUnpWpI3SpVpWNp5UwXI3LOWmKUXwI3kNWFrU+9I3ZAWYEU9+I3qnWfNU0bI3HL:XWnE0SnGAb2vAHSrwjGvYnL","tlshash":"8882baa1042b9440ab472cd273cfbe355e5e61167081d6bacffe1898adabc360374b4d","first_seen":"2025-10-05T18:48:25.541997Z","last_seen":"2026-05-17T06:30:12.218176Z","times_seen":33,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":119,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/index-DSy7ZsHL.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:36.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/index-DSy7ZsHL.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:16 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CB7oApjsUlI5DjVwe%2FP%2FmBfJz9gPCdjBPUXAO0XygEOjtr0ixhnji92DYXzthMnFVuOkJCUs69X5x4TmAx4QZ4YEKF18fUEVTMNPZCQ%3D\"}]}\r\ncf-ray: 9c4864d899e11a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":484932,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39480)","md5":"19a137a79c3591dbf632cdf414901b8a","sha1":"babc3571484aef93c60f8b1db8e8a1c69271d690","sha256":"6caeaa4234b194ff718afd9a8ba792acdb43ed455c51c2d4cd4ebc140d74dbb1","sha512":"8c8e1788618b933d4a8cdb7f66967e5cb81d47248ee083661055676c4278fd63a1ef691321754eb881aeb2a94443bcd5fbfeb9397bab8d6789488962469455cf","ssdeep":"6144:zD0GF0OTY49XO3X+R50J8o+yNFwOvDzFpKOZ2b8lOp9v6JrDJ:ko0I/9X1R50XNNW4aOQolD","tlshash":"99a44bd872a5b2655be345e4407f0203723a2d66340c84a4f23dedea3a7444a65bbffd","first_seen":"2026-01-27T11:14:45.09169Z","last_seen":"2026-02-14T06:50:44.815464Z","times_seen":8,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/index-C05VmP94.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/index-C05VmP94.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7p6o18VrKYOQuCJpxVJLLYkM0mHMI5euSQYa7UsG87SU1YtU1d3%2Fw9%2F8uWfQOtdLPZJqgGIoWReuw1DqEP%2BYnQ5ikoaK%2Fb2ZcczptBc%3D\"}]}\r\ncf-ray: 9c4864da7a151a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242432,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64611)","md5":"c8b21e98840d55420fa92f568acb30bd","sha1":"8ea0ff34e1ecce63cdd1c3e994190daab3c29488","sha256":"86311044083cad654462be70d4538e791f3eea97105b8838cf6a0f72056f0e93","sha512":"d44226c0eeedf5857a146edba403ebc122856fa6759a40d19667fa0cefe844beef0f5831768fbe1acc333b189e1d0073bdcf44e16d2463e098e1800224bf06ec","ssdeep":"1536:jL466/qw4yreDUuXaEygYIrdBkNdpvFkgWIG4v1Kx8zuCMzvb76PTfB+eYXBBdK+:Bb5QiTkYWyZEJG+I","tlshash":"b234d8eeb7d4b3f4e447f7f0d82650a5761b28fabb67cf64c3a99d44a64105c8889c80","first_seen":"2026-01-27T11:14:45.068524Z","last_seen":"2026-02-14T06:50:44.798608Z","times_seen":8,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/LoadingOverlay-uM1vlHv6.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/LoadingOverlay-uM1vlHv6.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dim7jP7Pu16Ltp93zZq3HigJ%2FksmyKUxaDjWdct%2FBDbJCOwaszmWzxnEM%2Bq1FIluWmchh%2FtUGg9PGG1%2BnzDpW1pGchjdIvM%2B0V4Y46A%3D\"}]}\r\ncf-ray: 9c4864da8a191a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1772)","md5":"3d732e1058bb35567033c0216cb0b724","sha1":"cb8b5de0774613480eba662716e34fcb86e33324","sha256":"b18fd582ae88cdd2c9f1f9ea38fca3a04630c73aeea52d121bc8d7381ceada5e","sha512":"d0ea202f44adbf3978356727e1a23201e37ed288510195262835dda7fdb569bbb0d025efcb0327b9f381956386b19812ac3ed05cca9a9ad83e353acdcf1a59a5","ssdeep":"","tlshash":"b131025e91076bed86970ce4f85f900a613f8cc4ef3f4cd4e0b8600a27900ad691b7d5","first_seen":"2026-01-27T11:14:45.086573Z","last_seen":"2026-02-14T06:50:44.782993Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/loader-circle-CMcDfjan.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/loader-circle-CMcDfjan.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b751R%2Bq8mM8FtfgKS6gGNKY2mWDe95FbpP9%2Bye4HAmICeVVNE%2Bd2dtd6%2BCPd8py6rWMsie5kNVTZ1teG56pAPivXiI1E%2B4MfH68ZtAE%3D\"}]}\r\ncf-ray: 9c4864da9a1a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"71afef50f4275c150288462b2990f2b0","sha1":"6d0728616ca4bc7411a1e81109839a771db39453","sha256":"97cd475a5dc969055aef17f4526be8512be7e7698a550add5427f3d40d232298","sha512":"14cbf50e000c62e816b6052f7c99ed763c5abc3f824757cad795ea2518dfa32a62ce733196f7f02935d09f36c64356b5c6165d6d01a7e315d4523ca1e5f1e118","ssdeep":"","tlshash":"3ae07d2b1e6413b301938c781b0ae6c96b051599435e33a07011832c89310efc2dfdc0","first_seen":"2026-01-27T11:14:45.072368Z","last_seen":"2026-02-14T06:50:44.785875Z","times_seen":8,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/ltc.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/ltc.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a3d11a811ab43b8c095cc9dc9ea7c8ddd8027268707afb7cbf159ae535b85689\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 2710:1694BE:33B79C:391FB1:6978B513\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.321607,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 254f0821065c6e003a0064e5619c5d022818f79d\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 59\r\ncontent-length: 682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7dcdae7c7e0a356a4e6299279a43ab34","sha1":"9711559742e0af049529468fac61f90621a46c5b","sha256":"556e8951c616fb78cf94b65817c1d69c8cd32440a6ed0cf2bfda0083fcaac300","sha512":"d205ff31c0fa7e1c13bc12868f04a77c1fea4b28d3fa8fbd4b3df6482275dc79a5fd09039d5641e47fdb117229283ef26f0254a5ec6daf8aef69960e9707c6b9","ssdeep":"","tlshash":"bd31cd71929cb40f1c5a537af3a0a0a7032f20b971ae154dfdee9e28a4336d7d483944","first_seen":"2023-07-03T17:26:34Z","last_seen":"2026-06-06T23:49:41.805374Z","times_seen":34,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xmr.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xmr.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a554b9a9ff39d32e0ed39fd9cffdb91a54b9c31fec981fccfdf3e57d3207b614\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: C3F4:3709E2:35F258:3B5834:6978B516\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.315802,VS0,VE3\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 49089637a8c78816ba26e403ee66e3cb19c270f5\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 58\r\ncontent-length: 774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a861250c6e1c88421f21f89765de11e","sha1":"0e040b3df7d3a1de2c4f0768180ab28a879363a0","sha256":"32839784e9dbe34be0cf041f159b739a693ff8cbca1199ac897024aa039be040","sha512":"411b515687275e2510b7b58c026e8ba28253285f282828f1a80598d4ba4579e894b5512fd539f2ed9b23ab298399215c7fc13c7827027a1d7deb51137719a6aa","ssdeep":"","tlshash":"1441dc70926da44f1c5a533ef3a460a7132f20ba31aa560dbdae9e287437693d983940","first_seen":"2025-10-17T18:21:59.263928Z","last_seen":"2026-05-15T05:34:42.550568Z","times_seen":19,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":46,"dns":1,"connect":17,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/dai.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/dai.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b6b4a5363c65a24062a3f38cb7a02d7d530e272c15ac7dd002e8a0ea4b3dcad9\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 5C0B:2FF331:33C0CE:392793:6978B516\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.319547,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 640bbca70f0e8945dd215f09d29e7d4899cbfc3a\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 59\r\ncontent-length: 872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":2012,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1c6997e290e7d652ae29aa4346eb02a","sha1":"f1f137ac168ef90cfc3442eaf484bba2b82463d3","sha256":"778f90f8379eef873ed433d2e9c038ab5cb14a35c7190b4ee8d96821caab37fd","sha512":"dfcb96b20652814963897a74fb4443c85f0c8cce32de4377bea9fa41ff0ca4aedeba83fb61a419b2b6f9faf9422e527d63a3757dd36c88ad154691aa74032a95","ssdeep":"","tlshash":"ca410e619268a44e6c16073ee3b4a0b3173f30b9715d644dbc9e5e19b433bcbd583944","first_seen":"2023-11-29T10:09:33Z","last_seen":"2026-03-20T19:18:18.614162Z","times_seen":19,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":47,"dns":3,"connect":18,"send":0,"wait":17,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/reserves-gsquIYIW.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/reserves-gsquIYIW.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrzJUYdh5xATo3izLZAwgSi3htIJsRcLGUifHd5pOfpeaQvYHhcePgqI6%2FNfZ8b1YrbMkAyLt11Z3A8oCC8tCbuRAxDu%2F%2BejKSmxKyQ%3D\"}]}\r\ncf-ray: 9c4864da9a1e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2187)","md5":"bd363471e30e76e43deffd896616cd84","sha1":"12b147dcbea674960034e7d91b206bb6c6b1bb95","sha256":"93a1a9e4b5dcb09680f68a091ee7f267d5e173ea39591d570332b8d9393447a5","sha512":"31ae04a2201376ec0c9dd089dd40758c342578d413a94a31a31940b38cddcb68ea289e30bf2c479315358a6b8493e3c591e7a0359287c9cf1b4b5191982e1f92","ssdeep":"","tlshash":"e341f155aa61f26f40b3bdccdd181410822d646c356e9497bf7828c2f940e02667ebb9","first_seen":"2026-01-27T11:14:45.08893Z","last_seen":"2026-02-14T06:50:44.78963Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/loader-circle-CMcDfjan.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/loader-circle-CMcDfjan.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjU3lCUDJH%2Bppw%2FCrqRKKK5rnZ%2BaqRrHQJCV51uUuWSjoME6Jd9a2%2FBXT4ZA21ITr9L8YRBGzqhqvYmiRzQ%2FA8Iyq9lAXxRJAi%2F357s%3D\"}]}\r\ncf-ray: 9c4864db3a331a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"71afef50f4275c150288462b2990f2b0","sha1":"6d0728616ca4bc7411a1e81109839a771db39453","sha256":"97cd475a5dc969055aef17f4526be8512be7e7698a550add5427f3d40d232298","sha512":"14cbf50e000c62e816b6052f7c99ed763c5abc3f824757cad795ea2518dfa32a62ce733196f7f02935d09f36c64356b5c6165d6d01a7e315d4523ca1e5f1e118","ssdeep":"","tlshash":"3ae07d2b1e6413b301938c781b0ae6c96b051599435e33a07011832c89310efc2dfdc0","first_seen":"2026-01-27T11:14:45.072368Z","last_seen":"2026-02-14T06:50:44.785875Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/arrow-right-B-_6qrd0.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/arrow-right-B-_6qrd0.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vf1q5bPeTZufyJJ6DBMWmKxDkDgCpz60GZ1lg5ho%2BlbX52IO1lKFMwc49jOiT3DqRgqWwpKm1FTbh3%2Bl99H8c82iPDI%2F0XbDHo%2FGxXA%3D\"}]}\r\ncf-ray: 9c4864db3a341a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":338,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"7bf2684d95c9540f495b149307534bb4","sha1":"3118ecb2118acf1a6b8f8f897dc288d0f51b6821","sha256":"7bbd7b891ee84d7cddd5a84d0ffbbdee2609ef4bbc78cffae220b4d973e09b2d","sha512":"044b407821864a68f8d2507299162beb8b1d8d592a3e78771fcde14f78106257c81bfe52b02be49278a02dc5d6a843ce53e2e95ccbb40e502f3498d314667f2a","ssdeep":"","tlshash":"51e07d5f2ec063b3029184ad2f4be5ca471c15ec836f7650741683ad86300df86dded0","first_seen":"2026-01-27T11:14:45.076795Z","last_seen":"2026-02-14T06:50:44.787767Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/index-C05VmP94.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/index-C05VmP94.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-DSy7ZsHL.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ii0iBF3RYTVGt3C9dTsSWhZr%2FcYProfzXo4hl8rEhOcUvMIR9lbhbF1JL87NiGtEq0mXHD6teV4ipkjIOg95yET04uHH6lKcvmwHAtw%3D\"}]}\r\ncf-ray: 9c4864daba1f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242432,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64611)","md5":"c8b21e98840d55420fa92f568acb30bd","sha1":"8ea0ff34e1ecce63cdd1c3e994190daab3c29488","sha256":"86311044083cad654462be70d4538e791f3eea97105b8838cf6a0f72056f0e93","sha512":"d44226c0eeedf5857a146edba403ebc122856fa6759a40d19667fa0cefe844beef0f5831768fbe1acc333b189e1d0073bdcf44e16d2463e098e1800224bf06ec","ssdeep":"1536:jL466/qw4yreDUuXaEygYIrdBkNdpvFkgWIG4v1Kx8zuCMzvb76PTfB+eYXBBdK+:Bb5QiTkYWyZEJG+I","tlshash":"b234d8eeb7d4b3f4e447f7f0d82650a5761b28fabb67cf64c3a99d44a64105c8889c80","first_seen":"2026-01-27T11:14:45.068524Z","last_seen":"2026-02-14T06:50:44.798608Z","times_seen":8,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/arrow-down-up-k9Xe6Z3z.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/arrow-down-up-k9Xe6Z3z.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=89OQ%2FigZLKnXCxm8AJrB5VivEbFnLrGNrqKYBfGllxDi1H8gUYyqK994sYm7IA27DWwLINypcqucJYE4%2BSjPwCJvh6lpmxrKnJ11lVs%3D\"}]}\r\ncf-ray: 9c4864da9a1c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"5c521a92d1f6a70ffc3d81ecff421e2d","sha1":"ede9524225618ca8453e80851dd911f7fd44d4a5","sha256":"b0ef6c5fceab1d259660c5ee00c2af4f37cd6f0fdb2c01d7a142ee82c6a425d8","sha512":"82cbf87dab2cee4dc3aae9f152c289e16fd7ebbf96d43e82d7ccb07bb941779f032f01c1c3fda5001404cd6b4de83c3c9f81ca5453eb672d400d77acdff62d88","ssdeep":"","tlshash":"07e02b1b1a80637305a1d5ac1b8bf9856e9916fd939f7a51b8134379d73045f49ccfc0","first_seen":"2026-01-27T11:14:45.067395Z","last_seen":"2026-02-14T06:50:44.799613Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/favicon.svg","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3noDrilXV2F49UMxjjb%2BSEOU5XoHsu2whE%2BxIrFiSmzWQfh1OLvBnRMhWX0teRsPYdU2ABqNi2Hb1ywpzx4b2FwK3xQ7Og1GXdW50o%3D\"}]}\r\ncf-ray: 9c4864db1a261a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1134,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0064d0192def776e363a24635f0e33b6","sha1":"8612eb06eef8ba207f016fac865159697ea4d48a","sha256":"92949f2d3e7cd369b2ae9c26f98ba933402a1aec210267185cb975eb399a6544","sha512":"9bf3d0a1b9ea43025c63dddf15139f55142dc447e2fbe2b7a7cd62633d4a9312113b8c4c8d6ff86cb77230ac90f382fa97ceafcb7a64f642ee0bf01130bcacf0","ssdeep":"","tlshash":"da213af3e2c1c6e2f54aeba0ca7a6475306b14fb2f42c3a104815e65d6814ac688ac78","first_seen":"2026-01-27T11:14:45.087734Z","last_seen":"2026-04-08T17:22:34.494454Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/trx.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/trx.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"8ed85f976d749e66107eb2e00cd32915e8be5c36479f4a4f6be7acc78cc2fba2\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 8D4A:2FF331:33C0CA:392789:6978B515\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.306954,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 301e6b99dc913e56da6706d4d843db090db3c778\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 58\r\ncontent-length: 853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2071,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"332e62cbf427ae639e0b6666bc0f51b7","sha1":"ed3be3a2b9dde2faa0ce06cc15efaea58f5e3fe1","sha256":"1869f973d675991ac2c86b71f457ab30ed32da45db83fc29aeb6e9a6581c21aa","sha512":"44ec2b750d957168c60ac5744a8e5ec68fb3be35904e6e05b8ab67effdd2fbc371f907203b98b8dd552e8160d41a80c22479fdf39f2f15dce84b4e7349f2aaf2","ssdeep":"","tlshash":"ba410fb1536ca41ebc4a873ae3e46067032f70b97199649cfcef5a2874336d7d487944","first_seen":"2023-07-03T17:26:34Z","last_seen":"2026-04-28T06:23:18.662327Z","times_seen":31,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/prices","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"POST /prices HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://malgoswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"ids\":[\"BTC\",\"ETH\",\"LTC\",\"XMR\",\"ZEC\",\"SOL\",\"XRP\",\"LINK\",\"TRX\",\"USDT\",\"USDC\",\"DAI\",\"BNB\",\"TON\"]}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://malgoswap.org\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: application/json\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Qd%2Bi47EowxO3FA0Wv%2BP5Oc7%2FVfuxFWWgpdHDjRzw02U1lc27%2FtnHZqLhfFGXQiykifY7UYD2FqpcDDOHeipAz5xCKbGTavJHfkEuNI%3D\"}]}\r\ncf-ray: 9c4864dc2a551a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e39ef22a5269bb4106da105a1f9d62a8","sha1":"a14340c77d38b8a5a6f44f1b0161e80044376564","sha256":"f8c48ab7f78cdb81c7b462ce23cef9d0f47793110c2f2bd46e0b2c28c5107f85","sha512":"8794571a0fb8224a1e79b219a0fd25e3e4b5c7bca6b5c2a099ea6b4ca6556f6a2339c0efb1a8acd4cf62b10812c24293e9de834042353f5d2ad81593d6a1e8a3","ssdeep":"","tlshash":"78d0a781507292ff16a4d0be1d953785fc074e38005e4348d05dd5407ded4ff61100d1","first_seen":"2026-01-27T12:54:02.832755Z","last_seen":"2026-01-27T12:54:02.832755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/currencies-CuzGmkPb.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/currencies-CuzGmkPb.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g0jBAtHwjTYd1b%2FSCRrFqIEk2jdIbLD36dLX1m7ODKy5cm2Xh5VOXnjQ%2FYPeApRcWECuzJaouGf2IBYKuRGlVtsyU1J1q2KwUwjpWGE%3D\"}]}\r\ncf-ray: 9c4864db2a2c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2809,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2808)","md5":"0a8544f152db3c08dfb03e6cdf734781","sha1":"1468ebe8977a0ca4f448259b242839a04f7a12f4","sha256":"4a39631615777b2222de2bb319cc240b086ff9e7ece8af21c56a5160bc29a18c","sha512":"e713196549037210d0c8d45a16bd8b234b45af324b55ffaaf89ce9f25b4eebd3a17b8ec72496ce7df871d75b0e51f992fb3f9b220828f26bd446869c8f142d2d","ssdeep":"","tlshash":"8f51cfef95a38c540f21e4eba23070dde079659dfca2e4dabbd4400852f538664a0fb3","first_seen":"2025-12-29T12:30:45.838649Z","last_seen":"2026-03-20T19:18:18.608824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/btc.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/btc.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"cc55b0a4e240e13f99d94804c82c451b8ece0076302eac866291c0a5ad1cf713\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: C8FD:2FF331:33C0CC:39278B:6978B516\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.306400,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4659253b5c45b7b51be5ea3a4451a77a1ddb9c26\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 58\r\ncontent-length: 1038\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61439a6caeb6dea3db2446dc5e81b7e7","sha1":"678d72fe9746f2068a29549bd3942b41665e8ab8","sha256":"bd00876ee9415b69b53784f2af106f913f9dd89a067c73faf8c854acb8b02e68","sha512":"d33d531e0a1f70dbf8d2d329156e2063f9f15ed9a7f18582c4246ae1347043867afb8823fd2ada5e2eed39dad91aad501939ab4de5d8156682f250b0b5c182e7","ssdeep":"","tlshash":"764162b54368a40e1c4f473df375a0a7122f70b9b16e5889aeef9d1870336d3e483904","first_seen":"2023-06-08T16:01:30Z","last_seen":"2026-06-06T23:49:41.837543Z","times_seen":37,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":55,"dns":3,"connect":15,"send":0,"wait":17,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/eth.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/eth.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"16e4f241c51d443d56479ffb16a90206743a8d9af5964344f0d75a9f7137892b\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: F240:15AF56:33150F:387CDA:6978B516\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.320534,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: faa2a2f3579d26b3cf3925849ddd1a65f7b02005\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 59\r\ncontent-length: 772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48b7cdc7d701c6705b49f3ad81a6f52e","sha1":"9334d9e4a9638d560d45aa956429f0582575de5c","sha256":"dc2fb7da464d8fda251761ce4536df3f78754f20ba2261308751fa9eaa2a4382","sha512":"bc24d2a1ddc63a2a407951c6461bf67ddfc6f310e181280a9b951c221bb048173500b42380a2eea27f00eb98c15996fccc456ab8f1664ae88ad4ca40b746e7b1","ssdeep":"","tlshash":"b84100744a6c704f6c5a177de3b890b7222f30f9726d105dbd9e4919a437687dcc3a40","first_seen":"2023-06-08T16:01:30Z","last_seen":"2026-06-06T23:49:41.82202Z","times_seen":50,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":67,"dns":1,"connect":28,"send":0,"wait":17,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdt.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdt.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"0a9c347199113610c00e2a95dda45ee819155480135602055d81843d2b46a044\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 715E:244A1E:3587B4:3AF003:6978B513\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.306902,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 2531547660207ef39a3417ad36cec041b88482ac\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 59\r\ncontent-length: 850\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2a9cab2400408fb50ce5608c591df27","sha1":"503de6bb8d6583813873ede70573f2c551bf7865","sha256":"060006890b2a3171551858f6e04d2454d9965b5f3677ea68d576f4e2c9ace874","sha512":"c9a4b1d36cb3713dde6d9e80a97073772f60e141893667e52047287a4f0c1d04b76226ff360ae72cf4492515b2bf7154759f4e447151251bb0ab4fc66e89ed10","ssdeep":"","tlshash":"4341fdb59368a44f0c56837ef3b950ab132f20b6719d124ebcae9e1db4336c7e493548","first_seen":"2023-05-29T17:41:07Z","last_seen":"2026-06-06T23:49:41.801769Z","times_seen":46,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/chevron-down-BoN6nKvH.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/chevron-down-BoN6nKvH.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BZMxv5cU9%2BeApHFzTIJmYxC36dxZpvMsEbS2eFGHXDtpKLDkAvlFw%2FWHMK%2F4ZtbnoJxj0tq2KMYrd3RmbM22QBKeuYrFUfkCoChbPU%3D\"}]}\r\ncf-ray: 9c4864da9a1b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ae7415231580c1607b9b2764bb3a447a","sha1":"67ba100cea8bb636d5b626c247a89940ae3f9ec8","sha256":"2c157c10b66abe197dcf56a1b82385261fcbbbf3c7b419331d1b2e26cdc9eadb","sha512":"136de65bbdf3e134271d48787201ebe402137a0f0c59332fa93ce1a7273d508a37a4522c73fdfa4e48c8d24a7d3ae5ad1fbaed027d6f800f459c90bc9fb30d18","ssdeep":"","tlshash":"4ce0cd2f26602273016548683b4fe6ced71915dc975e7354a412832d85305df42cddd0","first_seen":"2026-01-27T11:14:45.073545Z","last_seen":"2026-02-14T06:50:44.804074Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/arrow-right-B-_6qrd0.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/arrow-right-B-_6qrd0.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCrE9Vpbp%2F4xEo%2BXaceAn7GzffRm1PZ8w5hmVUDXNwv%2BpfQI%2FFRD2X8OeGq6LVT4LJ%2BzKl%2BsaAJe5vsVgSiNFK2m%2FEpMfbzI0fSixtI%3D\"}]}\r\ncf-ray: 9c4864da9a1d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"7bf2684d95c9540f495b149307534bb4","sha1":"3118ecb2118acf1a6b8f8f897dc288d0f51b6821","sha256":"7bbd7b891ee84d7cddd5a84d0ffbbdee2609ef4bbc78cffae220b4d973e09b2d","sha512":"044b407821864a68f8d2507299162beb8b1d8d592a3e78771fcde14f78106257c81bfe52b02be49278a02dc5d6a843ce53e2e95ccbb40e502f3498d314667f2a","ssdeep":"","tlshash":"51e07d5f2ec063b3029184ad2f4be5ca471c15ec836f7650741683ad86300df86dded0","first_seen":"2026-01-27T11:14:45.076795Z","last_seen":"2026-02-14T06:50:44.787767Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.org/assets/addressValidation-DVU3KpOv.js","fqdn":"malgoswap.org","domain":"malgoswap.org","tld":"org"},"ip":{"addr":"172.67.166.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 16:57:48 GMT","end":"Sat, 18 Apr 2026 17:55:18 GMT"},"fingerprint":{"sha1":"7F:15:1B:36:34:06:2D:3A:F4:3C:C6:0C:34:2F:15:80:EE:22:FE:11","sha256":"ED:58:03:6A:73:7E:35:C5:B1:E9:37:90:70:B0:C3:74:F5:59:83:72:18:48:23:DF:BD:9A:89:C4:53:7A:72:9E"}}},"request":{"raw":"GET /assets/addressValidation-DVU3KpOv.js HTTP/1.1\r\nHost: malgoswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 27 Jan 2026 11:15:17 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNBfJKrhMjZ0BzYDRG03ZIuQ1Z%2BOmD9ZO9P%2FaJijzc1An272nK8AbT%2BBILC5fHBtdQn5xBQSasDKwHYU7QS2q35AUepaRCJXiv%2BZddk%3D\"}]}\r\ncf-ray: 9c4864db2a2a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2682,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2472)","md5":"c5971ad74fbe5506969757da5c4e7648","sha1":"79c3bc11e425ad7e51ace4ffa710fd7bf7b71f6b","sha256":"358b1f2de3558530db78a5b4568e30debd27153bd8171308615ac1fa2c05ab19","sha512":"bb493486e9c2352736bd18d5414bf429a69bedce0106f5b60e4173e4ccbebf0b2d106867aec309ad2a80df66ef3928cd448e551734421d5e5ab17b5d270e7294","ssdeep":"","tlshash":"a55121c4f7ebf0a513f118de2cc695175efcf7a4702d2428b00ac4526974499abbbac5","first_seen":"2026-01-27T11:14:45.069828Z","last_seen":"2026-02-14T06:50:44.797561Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"malgoswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xrp.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.org/","date":"2026-01-27T12:53:37.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xrp.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"aae8b33c4b584d255d7ab515511480cf919aab577cc373b031dce33f8273f53a\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 7160:1D9591:34DC4B:3A456A:6978B513\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:53:37 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1769518417.306588,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 495785610094f43d163dec881f05f35fcc4a7775\r\nexpires: Tue, 27 Jan 2026 12:58:37 GMT\r\nsource-age: 59\r\ncontent-length: 687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d93d4cc83cf5f88c35f46f9caf5441b4","sha1":"1c74580c8a5a9de88369ed33114ad2787dcb21b4","sha256":"faf4ebbafb2d3bd61b89e0001f5f73447fabb86e71abdd951bf51a8847dc17c4","sha512":"0ffc43b6bcd883322319e41e830b6a6bf355b66c587580803033ca5311346e3ebd0caff3a27870013c993f7d505cbbce3f807977563ae70a9c3fd96339adc92c","ssdeep":"","tlshash":"b0214161475aa80f1c09433ee3f4e0b7822f20fb709e1549fdee5a18b433adba447a44","first_seen":"2023-06-08T16:01:30Z","last_seen":"2026-06-06T23:49:41.843953Z","times_seen":34,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}