{"report_id":"88da06f2-bd1a-4371-8d3f-b9f63cdefeca","version":0,"status":"done","tags":[],"date":"2026-09-11T03:06:37Z","url":{"schema":"http","addr":"zkswap.live/","fqdn":"zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.zkswap.live/","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"title":"ZkSwap · The first privacy aggregator for Robinhood","dom":{"size":3346,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (304)","md5":"da5c59c355c02011a4b41cce374bc62b","sha1":"bde0e7b4478d3bddbb0f8b99ffb00c7a043a6b30","sha256":"28b668f0c26245692ce0b04f875f86383f23f243c08c561890725e5e410b4b21","sha512":"ca758ab8b6f4a32cba83f3f0c88ff5d29355e51b9fdf920c43661dbb4c8eab5e53b02ad1d6a772a3c67f1997e8045b78bd0bfd0e267e5f43aceaa78dbaeb9363","ssdeep":"","tlshash":"82617232b9d044170299d2c8b736f7bce9daa647d016b860b2fe05964fb1fe08923995","dom_hash":"domhash4026109554fc8b059fc402deb9ea70e2","first_seen":"2026-09-11T03:06:42.595485Z","last_seen":"2026-09-11T03:06:42.595485Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zkswap.live/","fqdn":"zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:06:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.zkswap.live","ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-11T03:06:37.550611Z","last_seen":"2026-09-11T03:06:37.550611Z","alert_count":15,"request_count":15,"received_data":714344,"sent_data":7118,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rpc.mainnet.chain.robinhood.com","ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-11-30","domain_rank":0,"first_seen":"2026-07-03T01:42:38.769033Z","last_seen":"2026-09-05T21:14:13.382447Z","alert_count":0,"request_count":10,"received_data":4384,"sent_data":5510,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"robinhoodchain.blockscout.com","ip":{"addr":"104.26.0.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-06-10","domain_rank":0,"first_seen":"2026-07-10T15:59:53.514661Z","last_seen":"2026-09-07T18:16:02.734714Z","alert_count":0,"request_count":2,"received_data":2691,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"robinhood-rpc.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2026-09-04T08:19:10.867048Z","last_seen":"2026-09-04T08:19:10.867048Z","alert_count":0,"request_count":2,"received_data":1282,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"zkswap.live","ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":339,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.zkswap.live/","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"365549102069a9def1833c7460c2dddc","sha1":"e08b8e678b98b0b23e73cdcf35f23b36f7522bd7","sha256":"1230ce757ff740ea269e5833b31e8fd583812ce72c9b48d2c30d2ef2de055eb4","sha512":"6b5d1c97f45df75f95c753c55d8ef28f5151d84f852a080bd2538b4e49f6ca8f519e4d2bc42dc9a349c600c4746d8487e97ee5201832fb664a360e21e652e961","ssdeep":"","tlshash":"f6c092f9a5048c760efe248ef0e5e7c47e300992f4823020407ec8890130ece9614ec8","size":135,"data":"","first_seen":"2026-09-11T03:06:42.65888Z","last_seen":"2026-09-11T03:06:42.65888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/site.js?v=2c5693f2","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c5693f22fc76e3c3e585fbaef435592","sha1":"bd07c43fa196dd704a71a66018a4e2e00004cdd4","sha256":"62fa44c635d3f003cc31dadcb5a32b95ceb2e11a071a3564445f276af42e3984","sha512":"6a4338d8e5840e9751f8d53f4cfb4ca658ba716180d7892cd1adfecef317672e5a8511d66d460b74ff9fff73454dc511dc0fabb5f88f9e9415701656775f0a16","ssdeep":"768:k1lvR/LmE+q84p/bL3p4TzbiLgYJVqkLbGK/bS:oqE+kpzj6HeJPzbG+S","tlshash":"cdd25cf1d526d0b442fe413a922b3e4a46f5a3c7069c28b4fedc4d912bdc5add8b8427","size":30745,"data":"","first_seen":"2026-09-11T03:06:42.61731Z","last_seen":"2026-09-11T03:06:42.61731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/head.js?v=202b7050","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"202b70504bcb7f9fdf19941c05133428","sha1":"9c56ac70261c02f738e1a3c8ad58962fbbc7c462","sha256":"64605e49c7c2b129614901ddbb8cfb0630485ad56a4b39aa8d6ec1835252bd0d","sha512":"32ef145fead7871362f376631ecf7da6c66ebbc3a1a92c1decf5b0f0e6299ac81500ee015d2ba9dc7f95ffad263f95a66b3365088f0c82550f00ad1385538da9","ssdeep":"192:5IxOZTLxijiQV5iQigRYC2xvFWw64IDPTQM3CZXWEctYteqa/f60FEhYHM:wq45oWw64mTSGE+u","tlshash":"3522a747e68321392417b57a4fbfc50d57a888536162cd01b90cd2425fe286ac3bdefa","size":10512,"data":"","first_seen":"2026-09-11T03:06:42.643415Z","last_seen":"2026-09-11T03:06:42.643415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/fx.js?v=2f991cf9","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f991cf954ecb3e974c2bc1a8508ad9e","sha1":"ff9c32c608ef5dcb7074f2decfe005cbf9fd9fa0","sha256":"79588c9e8395470f4bc01891dc687811e2453bbd99d8b50edf7c7d92fc108b8f","sha512":"e44a8fc3d59dbc0ea1561433f40827dae3cf2596d14690edb6aa6735b8749ae74ba7dc8f701bfbb8cf9056216c7a910c971ab4f1f6c3566b90a871a261d41f0d","ssdeep":"96:b7NTmTMOrvxUec5tA+G6YHNenKjB9uH+FhLgh7Jqvdh2tc3Yb+ZNzSrzzKdXGR:fNTmwQxZOA2cNWeBC+Fhgtsdq6NzYzK6","tlshash":"7ea1850aba5a303a6837937fc25f5046746a204b26c6e9167cacd3850fe05640b6fffc","size":4973,"data":"","first_seen":"2026-09-11T03:06:42.62571Z","last_seen":"2026-09-11T03:06:42.62571Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/wallet.js?v=2c5757e4","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c5757e47aa160d58d0335546e830fb9","sha1":"7089a9c6e5b0dedad4b622cc7e4791541156bc7a","sha256":"e82401408af842cf436f79561538efe4a29f21b542a3739feb223ce0dcb2f714","sha512":"cc3633452510805bc8b57a8ac54e51b2a76c33fe35b83d6650df25d55669012463c8cfed8e767c62cb9fb7751d7df2e8c568f16e0a420e6ce15251a06ac92c27","ssdeep":"","tlshash":"4c5110d7b8927095c527622c5d4fb518a73e2501c486caa07ddc82e0efb5529c66adcc","size":2498,"data":"","first_seen":"2026-09-11T03:06:42.651823Z","last_seen":"2026-09-11T03:06:42.651823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/chain.js?v=b1204bb3","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1204bb31d31b592a6842e8360f664ed","sha1":"3fcd697415caf23c6017292c675148ac38afeae1","sha256":"7d5b909aa58892baf24d2dd1dc3d67df7908d30f7c864483b15c51073a768864","sha512":"66849988089872bbaafdc987565aff41c3dbc3d3d0da7ddf9c779de6db155677c02d204f0e2eb1f95e41881c7a95ec40046b8c517634ef13666dff8acd9ee842","ssdeep":"192:JGM1UQqZQkyeR4fqApli/ao90JSl1ELKolo4TT8Mf+HXu5I0VTkXN28Ciki/lmev:J/CopfhpwaFgl1Rh4TT8CI0Vs1Wb5a","tlshash":"4642b72a75973076d413e2b9920f6518a57ab50346cad9a47c1cc280afe493cc7fadec","size":13122,"data":"","first_seen":"2026-09-11T03:06:42.654463Z","last_seen":"2026-09-11T03:06:42.654463Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.zkswap.live/fonts.css?v=a8bb5ac2","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.048Z","timestamp":1789095968048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /fonts.css?v=a8bb5ac2 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 621\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fonts.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"a8bb5ac2c38b2d72425f5b30926882b8\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:46 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n7wbn-1789095968053-977a1f132030\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1200,"size_decoded":982,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a8bb5ac2c38b2d72425f5b30926882b8","sha1":"1a83ff9f0837335bdc8f5c739cc2f90bef35a6bc","sha256":"229cdd65d63a9c1e969a273dc30e87116ec8d23cbc7b3f7c5c7aba8911ed8c44","sha512":"2fd1ec1c1ea57747df3d671464a87dcf40898cf090952a99831abb60b7d08dcd4a1f93075d7f82197f1b2b5841dfa1aebee81cd796fd356c4ef1bc6b56bf1ed8","ssdeep":"","tlshash":"2d217f7108657504f2d78c7237cf6e43184dd024618bf669db2b44e8afa5e21237273d","first_seen":"2026-09-11T03:06:42.599716Z","last_seen":"2026-09-11T03:06:42.599716Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.463Z","timestamp":1789095968463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\ncontent-type: application/json\r\nContent-Length: 115\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":115,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_getBalance\",\"params\":[\"0x8df9b8816de137bebbc254828858f720dfc5c131\",\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 78\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a393746c3f7cb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54,"size_decoded":424,"mime_type":"application/json","magic":"JSON text data","md5":"26a278bbc9017c89de2de9e2103c19bf","sha1":"e69302022b6ef83bfc567a8f27354500081a4e85","sha256":"572584df973696c6b400b7f628ae8ba1fa21e288b4f3f71cc151fff4f202aba8","sha512":"5f8e9812a872e92fcbf9ffc40cd1361eec8f33fba0b110ce8650cceaf2a6160f0b69e4fc0dbeb25c5ee7ddd1b1a067ab921a21c17e0a23aed68c450e241297f4","ssdeep":"","tlshash":"119002862a4a473985090c859409544271856a984a185e80474e0ba45149246a60b623","first_seen":"2026-09-11T03:06:42.603026Z","last_seen":"2026-09-11T03:06:42.603026Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/assets/icon-180.png?v=65e13429","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.914Z","timestamp":1789095968914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /assets/icon-180.png?v=65e13429 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"icon-180.png\"\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 03:06:09 GMT\r\netag: \"65e13429ec99567e841443ad7e93d51f\"\r\nlast-modified: Fri, 11 Sep 2026 03:06:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::22dc2-1789095968919-1747bffbadf2\r\ncontent-length: 17985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17985,"size_decoded":18580,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"65e13429ec99567e841443ad7e93d51f","sha1":"e36f9439bb293e3f3bdf078abaaa1c184bfb9f5a","sha256":"2dac59bf3802c047e6f1f5582fdfe53ecc91309deaafb6ce9f1a1093b47d3ff0","sha512":"1196d1ae6fa78d42264456493ced1e5442e24ac9945c5b2d5f144bd93643b38c25beb2f2e7fdcbe2478aa5d8456f02767d2777b3180b08de68094d73e3801ec6","ssdeep":"384:e+Fk092h4DD0vSByxw0HFmq6a0C6qlxu8fKlIOeAs0wXc/DxgGO:DFd2QDqTxw00lafdlBvB0wgDI","tlshash":"9f82dfee2d5b3f3fd9d64a63cbd9b167ec04ed52c108158bc86b465dce9e002286a40c","first_seen":"2026-09-11T03:06:42.606471Z","last_seen":"2026-09-11T03:06:42.606471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:06:07.810Z","timestamp":1789095967810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 2234\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:07 GMT\r\netag: W/\"b6e2b349d48ad1ca274af5dd242c5933\"\r\nlast-modified: Fri, 11 Sep 2026 02:28:53 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::66gbx-1789095967859-b5f96ca5907f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3251,"size_decoded":2061,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b6e2b349d48ad1ca274af5dd242c5933","sha1":"6e41e56f0b50a7c5a80b2caa1bc3a3ecdd3d4ce2","sha256":"21acfc7d107423a8860340cdafbdacc2d630e8b58dca471087555d2091744815","sha512":"174c674293b2a87b64f994236174f32ad1278fa689fe74ad24a0c9afe42a135513ad4e4804c73c6abcbf6f99cefb6ccce49c2b43f8c22c333146d59f1a0e1886","ssdeep":"","tlshash":"7d616232a9e0441701d5d2c8b726f7ade9dba747d016ac20b3fe01964bf1fe0c923995","first_seen":"2026-09-11T03:06:42.61034Z","last_seen":"2026-09-11T03:06:42.61034Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":17,"connect":1,"send":0,"wait":11,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/assets/head-sdf.bin?v=03e0cb20","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.047Z","timestamp":1789095968047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /assets/head-sdf.bin?v=03e0cb20 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 621\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"head-sdf.bin\"\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"03e0cb20dd58fda1c025aff163acfb58\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:46 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bp6vq-1789095968052-469ac79485d7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524288,"size_decoded":344719,"mime_type":"application/octet-stream","magic":"data","md5":"03e0cb20dd58fda1c025aff163acfb58","sha1":"165ebe6081bf592a595ad5de9d9df09f11aab9c9","sha256":"d4ae66eb9f2dcbdfb9803c2a1335a9330f4fce6d6bdd360477d5177b6386e693","sha512":"30b16a6f99fb7e1e49936707ba6d5bd6e4676ccc2042cdd25fa685557f46399145912801e8e80deef6a90cb82d5a01cd971eb4eb5f790425c80011d3df30a3d2","ssdeep":"6144:qbENU9AmSnZX0lOvRYecVp9+OfLLQgCIPXbkQu7/xdj7aBSQMMxrNn0L:HnmSx0kyecP9f/uoLgUSQMVL","tlshash":"14b4e0b8d15b6cbec77fcb8cab723f46c0ac117282906f3d112a44d48c59665bae7643","first_seen":"2026-09-11T03:06:42.613637Z","last_seen":"2026-09-11T03:06:42.613637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/site.js?v=2c5693f2","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.051Z","timestamp":1789095968051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /site.js?v=2c5693f2 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 620\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"site.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"2c5693f22fc76e3c3e585fbaef435592\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9zn4l-1789095968056-94c280434574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30745,"size_decoded":11600,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"2c5693f22fc76e3c3e585fbaef435592","sha1":"bd07c43fa196dd704a71a66018a4e2e00004cdd4","sha256":"62fa44c635d3f003cc31dadcb5a32b95ceb2e11a071a3564445f276af42e3984","sha512":"6a4338d8e5840e9751f8d53f4cfb4ca658ba716180d7892cd1adfecef317672e5a8511d66d460b74ff9fff73454dc511dc0fabb5f88f9e9415701656775f0a16","ssdeep":"768:k1lvR/LmE+q84p/bL3p4TzbiLgYJVqkLbGK/bS:oqE+kpzj6HeJPzbG+S","tlshash":"cdd25cf1d526d0b442fe413a922b3e4a46f5a3c7069c28b4fedc4d912bdc5add8b8427","first_seen":"2026-09-11T03:06:42.61731Z","last_seen":"2026-09-11T03:06:42.61731Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhoodchain.blockscout.com/api/v2/tokens/0x91f9fca4ff29dc5a755777f94d2beacc3023bdb0/counters","fqdn":"robinhoodchain.blockscout.com","domain":"blockscout.com","tld":"com"},"ip":{"addr":"104.26.0.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.462Z","timestamp":1789095968462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockscout.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 16:40:44 GMT","end":"Sat, 31 Oct 2026 16:40:43 GMT"},"fingerprint":{"sha1":"D6:4C:D5:00:67:98:91:E1:82:6B:87:E1:2B:CF:1D:14:E1:CA:2B:1D","sha256":"10:F8:65:48:BD:67:49:4B:9C:29:1B:2F:B1:D4:B9:A9:F5:CB:85:B3:C1:F7:37:5F:77:85:38:22:C7:B4:B8:42"}}},"request":{"raw":"GET /api/v2/tokens/0x91f9fca4ff29dc5a755777f94d2beacc3023bdb0/counters HTTP/1.1\r\nHost: robinhoodchain.blockscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: bypass-429-option,x-ratelimit-reset,x-ratelimit-limit,x-ratelimit-remaining,api-v2-temp-token\r\nbypass-429-option: temporary_token\r\ncache-control: max-age=0, private, must-revalidate\r\nx-ratelimit-limit: 150\r\nx-ratelimit-remaining: 148\r\nx-ratelimit-reset: 234557\r\nx-request-id: f606e8aec2d4e2f2b12944ecc76ae46f\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 11 Sep 2026 03:06:08 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVAdl8CQ5VTGyxzSk3o3PJyxDCi%2B8hOZXAEC8Ft7CzeYToPXf2BLcxQig%2Ff%2Frt5rshrfolrDHmHI3DFbr%2B4VHLBmWlJjEWhrxAOfmcyBJRGE%2FdArFtPzD0oOLsEW%2Fle52%2BrPaSZ2ysDeH1Bqtv8s\"}]}\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncf-ray: a393746b1c710b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55,"size_decoded":1212,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c77b41a01d2dcd527779d145529789e9","sha1":"136d0c5647d0fd71fb0d77e21bc10300e6941d11","sha256":"4e7a3121ef4fb350cff763c1bffe93898543d51231d16a2cc42a497ec0cf28c2","sha512":"2a6f7dec91c756dbf62516de726fe94a3384c9f1e77ea3c6efba84bb8d1e5e1624bcd302b3d65ff359e18af869c8f4e98f60bc651028d58706fd863cdff6e36e","ssdeep":"","tlshash":"be9002013a54815e28fa5f53f8a00e266c6ba14254004a88929085971551e4c1841152","first_seen":"2026-09-11T03:06:42.620867Z","last_seen":"2026-09-11T03:06:42.620867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":26,"dns":3,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:32.563Z","timestamp":1789095992563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 03:06:32 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a39375018e4bb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/fx.js?v=2f991cf9","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.053Z","timestamp":1789095968053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /fx.js?v=2f991cf9 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 620\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fx.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"2f991cf954ecb3e974c2bc1a8508ad9e\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q9rnm-1789095968058-35fe5243b595\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4973,"size_decoded":2808,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2f991cf954ecb3e974c2bc1a8508ad9e","sha1":"ff9c32c608ef5dcb7074f2decfe005cbf9fd9fa0","sha256":"79588c9e8395470f4bc01891dc687811e2453bbd99d8b50edf7c7d92fc108b8f","sha512":"e44a8fc3d59dbc0ea1561433f40827dae3cf2596d14690edb6aa6735b8749ae74ba7dc8f701bfbb8cf9056216c7a910c971ab4f1f6c3566b90a871a261d41f0d","ssdeep":"96:b7NTmTMOrvxUec5tA+G6YHNenKjB9uH+FhLgh7Jqvdh2tc3Yb+ZNzSrzzKdXGR:fNTmwQxZOA2cNWeBC+Fhgtsdq6NzYzK6","tlshash":"7ea1850aba5a303a6837937fc25f5046746a204b26c6e9167cacd3850fe05640b6fffc","first_seen":"2026-09-11T03:06:42.62571Z","last_seen":"2026-09-11T03:06:42.62571Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/assets/mark-128.png?v=b74e6c22","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.063Z","timestamp":1789095968063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /assets/mark-128.png?v=b74e6c22 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 620\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"mark-128.png\"\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: \"b74e6c22d63bd124bc74b46fbeecba28\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bp6vq-1789095968068-6914bce16b33\r\ncontent-length: 15433\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15433,"size_decoded":16029,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"b74e6c22d63bd124bc74b46fbeecba28","sha1":"f9fff02a73f92bec1139982b6ac1c5436490161c","sha256":"758e9917a4bf6b52dfe4f0c8458ac7d30a283b289a3f3a51b0e93b0cab95bc7d","sha512":"d51db62f657dbfbea569e8e9a47683e643b48980ad12aa97b024581a510e1cef4211f5a45bf599867a6f3e24dbbafd26d90bbfb5d07cc7bc974909fd3724720f","ssdeep":"384:J9GxL/WQpwUNucaIlfdnO2sWGPzrKBnQVqdyzANDuKr:/sGUNj1BO2sWGPzrKaqgzAZr","tlshash":"7d62c098609b682b28f485ad17927e54b6c11adcb96306093c56dc43493a24df62fbf8","first_seen":"2026-09-11T03:06:42.628951Z","last_seen":"2026-09-11T03:06:42.628951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/assets/icon-16.png?v=1f6ab9ff","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.916Z","timestamp":1789095968916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /assets/icon-16.png?v=1f6ab9ff HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"icon-16.png\"\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 03:06:09 GMT\r\netag: \"1f6ab9ff84e898930ff069248b733a83\"\r\nlast-modified: Fri, 11 Sep 2026 03:06:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::tgkbs-1789095968921-4d9444fa8148\r\ncontent-length: 488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":488,"size_decoded":1080,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"1f6ab9ff84e898930ff069248b733a83","sha1":"4e03ef3a6c80f9acc5e130b655f02dd8d128d64b","sha256":"16778f92ef63f3cccca02a2477638fd50e36eb92fef0e3c5a7ddf0d14bb38128","sha512":"90a1dcc68e38b45f1d465d5895e41b4b50d359b8281152cfaf9e45118f7d9c394feab177b58ff8e9f9b7ee3074951e4b409bbc2ee94a10cd1e745f8c5d0ae37b","ssdeep":"","tlshash":"adf0cce37cd934b0fc88e0c554d5c06f1a5ad07440e511b37370483413050c360e774c","first_seen":"2026-09-11T03:06:42.631419Z","last_seen":"2026-09-11T03:06:42.631419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-rpc.publicnode.com/","fqdn":"robinhood-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:09.132Z","timestamp":1789095969132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: robinhood-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 11 Sep 2026 03:06:09 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a393746f2c6f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":4,"connect":11,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:09.553Z","timestamp":1789095969553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 03:06:09 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3937471b96ab4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-rpc.publicnode.com/","fqdn":"robinhood-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:10.284Z","timestamp":1789095970284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: robinhood-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 11 Sep 2026 03:06:10 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a39374764cfe2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zkswap.live/","fqdn":"zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:06:07.696Z","timestamp":1789095967696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Fri, 11 Sep 2026 03:06:07 GMT\r\nlocation: https://www.zkswap.live/\r\nrefresh: 0;url=https://www.zkswap.live/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::q42tg-1789095967795-2111c402cea2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":63,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.469Z","timestamp":1789095968469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a393746c5f85b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":137,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.451Z","timestamp":1789095968451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\ncontent-type: application/json\r\nContent-Length: 63\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":63,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_blockNumber\",\"params\":[]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a393746c0f68b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":416,"mime_type":"application/json","magic":"JSON text data","md5":"931813b916f88010f6ac705c75e06deb","sha1":"e4c85927448e53362bb2600d61bbb05173a359f9","sha256":"3dabe08525f267d3ec76f0f333bc2ccc3168936d056e0ab57a27372ae3c7c9ce","sha512":"774a6b64b5dc338703379896c8186037299ddf9588270081791cb29dbc06ffae34eec856d249486dfe9765beb000298e8763773bfda19fd071df9a5488f3469f","ssdeep":"","tlshash":"b89004c0555d1731c40c0c01f144105331417fc50d0c0f44474d4d4c13547c75705771","first_seen":"2026-09-11T03:06:42.633939Z","last_seen":"2026-09-11T03:06:42.633939Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.464Z","timestamp":1789095968464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\ncontent-type: application/json\r\nContent-Length: 200\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":200,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0xd3AFEB2a57f70eF218Aa82451c51B2fb0416Ac9e\",\"data\":\"0x70a082310000000000000000000000008df9b8816de137bebbc254828858f720dfc5c131\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 81\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a393746c1f70b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":427,"mime_type":"application/json","magic":"JSON text data","md5":"5fa4f60a33683601c5bf9cd4404256b6","sha1":"81b7c50d4eb5c5c0619b4974797b01b6dae88160","sha256":"f3a7f2d9b502fa149a836fe95cc88d80f530e56781f9b2e1b26ea83ab2b18220","sha512":"c887477eefbc4dd7d35044868177e975241fe35ee06eeb5d83936d2bdfe2fc92c91273f1f19058f32296e61590bbdf54af43ae731ee968a925de7685903c6bc3","ssdeep":"","tlshash":"70b002c1154e4f72c68c0c55f104355123c2fecc99c40e41459d4d8435446475605625","first_seen":"2026-09-11T03:06:42.637505Z","last_seen":"2026-09-11T03:06:42.637505Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.472Z","timestamp":1789095968472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a393746b2f26b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":4,"send":0,"wait":138,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/styles.css?v=1f2ea172","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.049Z","timestamp":1789095968049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /styles.css?v=1f2ea172 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 621\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"styles.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"1f2ea1728f88586d1754a7035d580348\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:46 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::msj26-1789095968054-f88376f4b2d6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31313,"size_decoded":8662,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (459)","md5":"1f2ea1728f88586d1754a7035d580348","sha1":"858215d0f9e93db4b4f16ad7ff32518d0c8bba02","sha256":"115929d523564e404c8aff935a892d5a3a4d469d01bb66e676c5ebe9f793b1aa","sha512":"936d60270298d472fcbc2fcd5971ed8e204114f9aec6f910a92a3225f4051c24a39089c4667283ddb902deca2c48cbaf2f076f365c9682b11e6c210c3b8affe0","ssdeep":"768:fM/Y4lC999/eB4vhayZNnvzD0898CmvVTqVB:9999/3l98Cmv4H","tlshash":"d3e286b56614513df837e8563ac9a3ceb010a44bc86707ece8a76124c9c76f71eba74c","first_seen":"2026-09-11T03:06:42.639966Z","last_seen":"2026-09-11T03:06:42.639966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/head.js?v=202b7050","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.052Z","timestamp":1789095968052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /head.js?v=202b7050 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 621\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"head.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"202b70504bcb7f9fdf19941c05133428\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:46 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7d9qr-1789095968057-442ba286b750\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10512,"size_decoded":5162,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"202b70504bcb7f9fdf19941c05133428","sha1":"9c56ac70261c02f738e1a3c8ad58962fbbc7c462","sha256":"64605e49c7c2b129614901ddbb8cfb0630485ad56a4b39aa8d6ec1835252bd0d","sha512":"32ef145fead7871362f376631ecf7da6c66ebbc3a1a92c1decf5b0f0e6299ac81500ee015d2ba9dc7f95ffad263f95a66b3365088f0c82550f00ad1385538da9","ssdeep":"192:5IxOZTLxijiQV5iQigRYC2xvFWw64IDPTQM3CZXWEctYteqa/f60FEhYHM:wq45oWw64mTSGE+u","tlshash":"3522a747e68321392417b57a4fbfc50d57a888536162cd01b90cd2425fe286ac3bdefa","first_seen":"2026-09-11T03:06:42.643415Z","last_seen":"2026-09-11T03:06:42.643415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/assets/fonts/DMMono-400.woff2","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.105Z","timestamp":1789095968105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /assets/fonts/DMMono-400.woff2 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://www.zkswap.live/fonts.css?v=a8bb5ac2\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 620\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"DMMono-400.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: \"b4ddae0582126f2065734ca58716e210\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q42tg-1789095968110-07a29c30e208\r\ncontent-length: 8688\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8688,"size_decoded":9288,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8688, version 1.0","md5":"b4ddae0582126f2065734ca58716e210","sha1":"f41e4e83f8222fac2fbd95ac6f3b7bdd2fe4fe5b","sha256":"fd7521f3531a5ccfc655b25c4f22e9871df3ec141ad79bb27fde20d0df347b6d","sha512":"e4ba37cf5e6568be95bd61970662e027f4e9e0881b7b0168fe7893cac8a48f4159292511ec36931856681eaccd5f8c389e221f196c38cd0cc189cba1fd90f471","ssdeep":"192:OPRP7Qh337aIfuTpNHprZ+jker3SMfHjvQyV4oARu7l:mRP0h3371WTfHRIAeDvnq3u7l","tlshash":"1202b0b67d46e5aff94c7bb480290f92eceb8df812e477c7055e5248518d5310a8e87c","first_seen":"2025-06-11T13:09:53.856736Z","last_seen":"2026-10-12T11:22:09.09749Z","times_seen":780,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/assets/fonts/DMMono-500.woff2","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.456Z","timestamp":1789095968456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /assets/fonts/DMMono-500.woff2 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://www.zkswap.live/fonts.css?v=a8bb5ac2\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 620\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"DMMono-500.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: \"ecb3fd43cbea393703c4d61cb7c3ceba\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6x5p8-1789095968461-3a0d40116ea2\r\ncontent-length: 8724\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8724,"size_decoded":9324,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8724, version 1.0","md5":"ecb3fd43cbea393703c4d61cb7c3ceba","sha1":"0fca4facaa0a279288b128a27a231c4974bee58b","sha256":"0e263db52797086e763679c54f84ded8cc1249879bc27dca2bd5dd446f6d9f36","sha512":"b243a2c0a1da23f34105e2efc5a508347ce48d0ed863a9256c4cfc9b3dc927dda55e912d777d46523a50a3ceb229e6195b182678075ec1a98c2e2d0db7e916a8","ssdeep":"192:VF+kQcxRpnaRQsnPEC3+Qa4sdGSVOv7NPdU2M:VAkPx/nunPqn4cGSVOTNrM","tlshash":"aa02bf9a79a3d5bcd12832f002dbe0d1b23bc619c85c9db0421d30cee95aef87e52960","first_seen":"2025-06-11T13:09:53.852021Z","last_seen":"2026-10-11T22:09:13.217209Z","times_seen":818,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.458Z","timestamp":1789095968458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 1\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a393746b2f24b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":137,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhoodchain.blockscout.com/api/v2/tokens/0x91f9fca4ff29dc5a755777f94d2beacc3023bdb0","fqdn":"robinhoodchain.blockscout.com","domain":"blockscout.com","tld":"com"},"ip":{"addr":"104.26.0.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.461Z","timestamp":1789095968461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockscout.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 16:40:44 GMT","end":"Sat, 31 Oct 2026 16:40:43 GMT"},"fingerprint":{"sha1":"D6:4C:D5:00:67:98:91:E1:82:6B:87:E1:2B:CF:1D:14:E1:CA:2B:1D","sha256":"10:F8:65:48:BD:67:49:4B:9C:29:1B:2F:B1:D4:B9:A9:F5:CB:85:B3:C1:F7:37:5F:77:85:38:22:C7:B4:B8:42"}}},"request":{"raw":"GET /api/v2/tokens/0x91f9fca4ff29dc5a755777f94d2beacc3023bdb0 HTTP/1.1\r\nHost: robinhoodchain.blockscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: bypass-429-option,x-ratelimit-reset,x-ratelimit-limit,x-ratelimit-remaining,api-v2-temp-token\r\nbypass-429-option: temporary_token\r\ncache-control: max-age=0, private, must-revalidate\r\nx-ratelimit-limit: 150\r\nx-ratelimit-remaining: 149\r\nx-ratelimit-reset: 234735\r\nx-request-id: 6673ea2584b0bf3299753691af3cc16a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 11 Sep 2026 03:06:08 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkxcssRg44N9sVriDi5I4U7Rf6ur1XBISRlpQ5ZhlxgQmFE33LMNE4ZUla3YhIdA3adZOG%2BeKul4Y52MGle%2B9F%2F2dv%2B0P0GG9iQ5UHEdhIVmD45oVBJ08jUsDEIeAwLSY8QbF2fnfVQxcSm7CQL7\"}]}\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncf-ray: a393746b1c700b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324,"size_decoded":1366,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"44a445502732486135d9e1283fdc7005","sha1":"46a3c7d1acece2a3ef6e9f13a51affa9d5d6802c","sha256":"04dd8f5d740822972ad8c94ce730e08dfa2dd87f9603d1e3dbf593413ea7d172","sha512":"8b6b3780d41ddf6009d3f8406e46e623b3d6de003d048119c8b34017f89951b6c456ce82a3fb56ee709a72096f6c83fca4b733f10f2e4d4656e13c9d92321e92","ssdeep":"","tlshash":"16e07d0902788d36cc5feb256298bf10546c304344cd0c154a3a8f5741f0cb5463af4e","first_seen":"2026-09-11T03:06:42.649394Z","last_seen":"2026-09-11T03:06:42.649394Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":5,"connect":25,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:20.563Z","timestamp":1789095980563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 03:06:20 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a39374b68dadb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/wallet.js?v=2c5757e4","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.054Z","timestamp":1789095968054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /wallet.js?v=2c5757e4 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 620\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"wallet.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"2c5757e47aa160d58d0335546e830fb9\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n7wbn-1789095968059-6dde2819f581\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2498,"size_decoded":1756,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (301)","md5":"2c5757e47aa160d58d0335546e830fb9","sha1":"7089a9c6e5b0dedad4b622cc7e4791541156bc7a","sha256":"e82401408af842cf436f79561538efe4a29f21b542a3739feb223ce0dcb2f714","sha512":"cc3633452510805bc8b57a8ac54e51b2a76c33fe35b83d6650df25d55669012463c8cfed8e767c62cb9fb7751d7df2e8c568f16e0a420e6ce15251a06ac92c27","ssdeep":"","tlshash":"4c5110d7b8927095c527622c5d4fb518a73e2501c486caa07ddc82e0efb5529c66adcc","first_seen":"2026-09-11T03:06:42.651823Z","last_seen":"2026-09-11T03:06:42.651823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/chain.js?v=b1204bb3","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.055Z","timestamp":1789095968055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /chain.js?v=b1204bb3 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.zkswap.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 620\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"chain.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: W/\"b1204bb31d31b592a6842e8360f664ed\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:47 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::msj26-1789095968060-d192b16c6250\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13122,"size_decoded":5485,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (437)","md5":"b1204bb31d31b592a6842e8360f664ed","sha1":"3fcd697415caf23c6017292c675148ac38afeae1","sha256":"7d5b909aa58892baf24d2dd1dc3d67df7908d30f7c864483b15c51073a768864","sha512":"66849988089872bbaafdc987565aff41c3dbc3d3d0da7ddf9c779de6db155677c02d204f0e2eb1f95e41881c7a95ec40046b8c517634ef13666dff8acd9ee842","ssdeep":"192:JGM1UQqZQkyeR4fqApli/ao90JSl1ELKolo4TT8Mf+HXu5I0VTkXN28Ciki/lmev:J/CopfhpwaFgl1Rh4TT8CI0Vs1Wb5a","tlshash":"4642b72a75973076d413e2b9920f6518a57ab50346cad9a47c1cc280afe493cc7fadec","first_seen":"2026-09-11T03:06:42.654463Z","last_seen":"2026-09-11T03:06:42.654463Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zkswap.live/assets/fonts/Outfit-400.woff2","fqdn":"www.zkswap.live","domain":"zkswap.live","tld":"live"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.107Z","timestamp":1789095968107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zkswap.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 18:01:10 GMT","end":"Mon, 07 Dec 2026 18:01:09 GMT"},"fingerprint":{"sha1":"23:9E:F2:E4:AD:CF:7C:24:8C:AA:39:23:1A:F0:47:2B:89:47:E4:57","sha256":"17:3B:4D:83:E6:FE:71:9F:0C:76:92:D5:4F:D3:C3:CD:23:F0:5D:5E:95:73:74:48:79:6E:A0:39:32:3F:C2:17"}}},"request":{"raw":"GET /assets/fonts/Outfit-400.woff2 HTTP/1.1\r\nHost: www.zkswap.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://www.zkswap.live/fonts.css?v=a8bb5ac2\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 618\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"Outfit-400.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\netag: \"98ccc2b7f18991a5126a91ac56fbb1fc\"\r\nlast-modified: Fri, 11 Sep 2026 02:55:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::96h5z-1789095968112-5dda3cf37ef5\r\ncontent-length: 32228\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32228,"size_decoded":32829,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32228, version 1.0","md5":"98ccc2b7f18991a5126a91ac56fbb1fc","sha1":"bdba243e0fe78adbaf198d9e11224ca054a4242b","sha256":"92684e4acde79ef07758cd09380b7e01e9824d8b061eddeda046f78c166d7b12","sha512":"ebbb35a8458c42ed3b751c9e586bcfbda49136b7973c8600a316faf3077e4ece030bb9a75f37b9f28771cc01c6aa50faf53768461345e216781eae5deda3a12b","ssdeep":"768:WP4gMxh4F6MRbOI/odAG4x1/y7Ox8ViCE4EqbDwrx80B:WP4gMkF7og+exrv4fEn","tlshash":"1ce2f11807a214b9bd5ab1395f21665eefc054b2b275730893007fc5fe670a86bc42f5","first_seen":"2025-09-11T10:22:24.746592Z","last_seen":"2026-10-12T15:09:28.506762Z","times_seen":7042,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.zkswap.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mainnet.chain.robinhood.com/","fqdn":"rpc.mainnet.chain.robinhood.com","domain":"robinhood.com","tld":"com"},"ip":{"addr":"104.20.46.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zkswap.live/","date":"2026-09-11T03:06:08.471Z","timestamp":1789095968471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mainnet.chain.robinhood.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 4","organization":"SSL Corporation"},"validity":{"start":"Fri, 28 Aug 2026 15:38:32 GMT","end":"Thu, 26 Nov 2026 15:47:06 GMT"},"fingerprint":{"sha1":"C7:4F:4A:E6:0B:BD:6B:67:9B:20:94:54:A9:2D:AA:CF:4B:4E:82:19","sha256":"2C:7D:B4:A0:BF:36:61:E7:13:C9:C8:E8:20:52:B1:DB:BC:62:73:A8:46:29:56:1D:DB:4F:A7:30:F1:DA:18:5A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mainnet.chain.robinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.zkswap.live/\r\nOrigin: https://www.zkswap.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 03:06:08 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a393746b2f25b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T14:31:02.514958Z","times_seen":19057307,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":4,"send":0,"wait":138,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}