{"report_id":"9612db82-381e-4f60-8bf7-d8f810b8048f","version":6,"status":"done","tags":[],"date":"2026-05-05T01:28:39Z","url":{"schema":"http","addr":"reto-swap.com/","fqdn":"reto-swap.com","domain":"reto-swap.com","tld":"com"},"ip":{"addr":"172.67.147.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"retoswap.com/","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"title":"Buy \u0026 Sell Monero | Cash. Crypto. P2P.","dom":{"size":64643,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1652)","md5":"ac81b3294596dd086558c298f06d3863","sha1":"8134b44ebd9a784fad0125559db2ae9176588c86","sha256":"9d00e8d5cda3248a452d715730823d78e82f6f4e8b86208aa9183084a203d1f5","sha512":"69ee94ac5171cda19939f244c2b7d324e6ec48320dee9e24133012fde95ff83445bbd53086565f4bedc322c7e81055163f9e0b4bd1183666ac932a219b61355a","ssdeep":"384:7uLqTWlg/17jZ7xa6a51Qbf3lI+K/pj1CyGm8WjLSIix3WrxXrvWiW2hW/ZoF+6M:zZcIS+K/pFeiLd+ZoWE8V","tlshash":"1353973120f46137958282d4aa355b5faf92ea4bce5b965473fc0bd85fe3c86cc23489","dom_hash":"domhash6454f4574c2dd6d466c81ec4cae7f568","first_seen":"2026-05-05T01:28:43.094095Z","last_seen":"2026-05-05T01:28:43.094095Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"reto-swap.com/","fqdn":"reto-swap.com","domain":"reto-swap.com","tld":"com"},"ip":{"addr":"172.67.147.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-09T01:28:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"reto-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"retoswap.com","ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2024-11-05","domain_rank":0,"first_seen":"2026-01-11T17:40:22.001522Z","last_seen":"2026-01-11T17:40:23.04244Z","alert_count":46,"request_count":23,"received_data":1596101,"sent_data":10391,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"reto-swap.com","ip":{"addr":"172.67.147.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-03","domain_rank":0,"first_seen":"2026-01-11T17:37:17.336085Z","last_seen":"2026-01-11T17:37:17.336085Z","alert_count":1,"request_count":1,"received_data":65178,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"retoswap.com/images/Group-48098168-p-800.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Group-48098168-p-800.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-18db0\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A350:127E47:11F4EDC:121EC28:69F947A8\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.177125,VS0,VE217\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a07f8f867577649374ef4205b99160a5b8e4b99c\r\ncontent-length: 101808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 818, 8-bit colormap, non-interlaced","md5":"11970e48c3b1d7566d9580472cf69d6b","sha1":"6cdad28494d290798de3fa00f999c3e8f884a86c","sha256":"ddd4826b078dc5541a4879c406a4ec65b0b4adb16c8a730e24ebc769222b8013","sha512":"9c98ba5cc2df9e6093c22ae90fd7e579ec04e0c5ec1ea37c96d203bd919181a80201162ca4075359f7b2ecdca0cc45593f5c3f34412adeb6e44427c7ed9a57b5","ssdeep":"3072:WYcJUDHBF7AJkXEapmHvSaxcQveFzNzsyLjjsF:WYcCTb7A6pmHvbx1kZzfLu","tlshash":"79a312fdf4e5f8970592f0de92ae1cd847cc2c9858b26d89ccbe30356199a3e41d0b60","first_seen":"2026-01-11T17:37:23.36042Z","last_seen":"2026-05-05T01:28:43.096166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/CardBodyBlurEffects.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/CardBodyBlurEffects.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-2edc\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2F3A:F0F12:101D062:10435E4:69F93904\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.411363,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 1d2f56e69ad87f5611ef30fb9d8306c7931993fd\r\ncontent-length: 11996\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":11996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 522 x 342, 8-bit colormap, non-interlaced","md5":"1048d85dd3af84f51425015efa87491c","sha1":"8c362c2b6b04672d85cbe9f856ec58fcd5e7111b","sha256":"d24c491bcdc3a82e0b5a1efef242b9afbf08649193b24593f79ed2923d9a50dc","sha512":"1390c595ab326bb2427cf68dae76e10e6a6c2808874f1ef7048c6826f91b075ad132b04cf9cdcef3ac827cc58340af32dc65ceb4cff28a601c0ec4761a509991","ssdeep":"192:xHfoW6mWEFi7iQVILtgVkEyLUs/PknQ1vWh9inUZi6GauI1oQVdndIP6bGGq6sK2:tfjE8i7DyEs/PknQ18UUZi6sI1vrdDFG","tlshash":"fe32bf16ef514ea9a0fa08b1ed10bc5feed9662f0f0c6461a1fd3a944c344b8472dca9","first_seen":"2026-01-11T17:37:23.365208Z","last_seen":"2026-05-05T01:28:43.097725Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Digital-flow-2.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Digital-flow-2.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-2b007\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: B37A:22BAD6:11AE3B7:11D7F04:69F947A9\r\naccept-ranges: bytes\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.415400,VS0,VE148\r\nvary: Accept-Encoding\r\nx-fastly-request-id: e7280e17e89d6bf8f06232b74569044f7cf3f18f\r\ncontent-length: 176135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":176135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1264 x 960, 8-bit colormap, non-interlaced","md5":"94b621100952f942ee216470cc1383d6","sha1":"216983326efc32cfbdfe599e720591ef69ca49bb","sha256":"5bcf563e6715bd07c146edce943ed043c729a75ce6637a7b4008c47a398562a8","sha512":"343cbd7622728d50eaed077ec0b8a3068ff089c7199c86674f047a3ae6909fbb969faa44528dd7e4c3f2c96df9ec7f1bcc9f7ca7d95fce8b5a644710ff376b8f","ssdeep":"3072:GSmDzKbWNz1mjaVAzZWxtLh5KuQd/3wOwVZEyfEihd8sqq2x31eQtOnOHc/ab2sU:GhiMAeVIWxt95KuQ53HWWS8sqnxFeYOh","tlshash":"5804121e269b10e164677bc39e6bef326af2d06f2a0190d840a0df5e0676f61716706f","first_seen":"2026-01-11T17:37:23.378924Z","last_seen":"2026-05-05T01:28:43.099163Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/video/coin_animation.mov","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /video/coin_animation.mov HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=4194304-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/quicktime\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-405608\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 185E:14E7:C7D0A:C9DDC:69F947A9\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 4194304-4216327/4216328\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944490.712200,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a1e40f1c2de6d0266cf3b55074ec62785102eae8\r\ncontent-length: 22024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22024,"size_decoded":0,"mime_type":"video/quicktime","magic":"data","md5":"8c9321d7a371ff2a66540f338ea4c4f0","sha1":"6f21bc874c2aced3384855ae1cdd5ff87d212449","sha256":"c82ec913fa6a0b673903e019facd643c762632e0665799b37e793ba8372b1cee","sha512":"b46aa4b3ccfd3b2bc8370882c341590f0157fc01eeb8f3c60b63873bb397025e617a296a7bd1db0d5652dda6c1ae637807b742d6bb1654e449bfc5f329ad4652","ssdeep":"384:lzXTrPKIgIds4rP3ArQmxcqFj0swlio7tEjgi3emfUHnQ:lzXTb/gIdx3Arubs1o7tEuc6Q","tlshash":"9fa2e3903bd6fe16ceb501f2a6c1d20aba30fa75519b87cf7943d7bd0926390ad1071a","first_seen":"2026-01-11T17:37:23.373318Z","last_seen":"2026-05-05T01:28:43.100371Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/favicon.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-21d\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1846:1526:36770E:37069D:69F947A9\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944490.820983,VS0,VE125\r\nvary: Accept-Encoding\r\nx-fastly-request-id: bfc16933738af044c000d3bd89784551ec09d007\r\ncontent-length: 541\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"09c2fb9843bba3d140cb5dae44912a29","sha1":"e9a554419a290625b2ae415a6295ea0ae8b816f6","sha256":"8aa9ee72ee074bbed4a56facaaca4a029cde07f9dc2e2b2e46c3f4b563530fba","sha512":"34412b0ae7608f245cfef5cb48e690547a404ae761b8f6e5aada665c365b3baae430d9b28bceb6f1e7768915278a0820b701d9bef0ef4225b7027aad6b9c7376","ssdeep":"","tlshash":"20f020cdef857c67cf5e642549b6056028b70ec92e1530eaf7ac380ba4349220684323","first_seen":"2026-01-11T17:37:23.374241Z","last_seen":"2026-05-05T01:28:43.101832Z","times_seen":3,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/fonts/Manrope-VariableFont_wght.ttf","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /fonts/Manrope-VariableFont_wght.ttf HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: font/ttf\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69af2368-28448\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: D45E:1526:21D49A:222F75:69F93904\r\naccept-ranges: bytes\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1777944489.365415,VS0,VE133\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 70a82732b40da6faf71079bec9b7316f2df2f1b1\r\ncontent-length: 67689\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":164936,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"GDEF\", 31 names, Microsoft, language 0x409","md5":"cf98436d65175c509540014c3189fbc6","sha1":"1b4df48059f89147cf4f2e29d2d6a22ce1b6e7fe","sha256":"42814a407491bfe54e4bfbc51ff6500d39445e49cc3feedea984cb5a768b04aa","sha512":"aa5cdf472303e3bb7eca21223872165a628f14f6458292db8d4965df640f50789e46a3ca92d491411cc1a5bfe127af3587963abccee297c5f0ca3f55b75a2df1","ssdeep":"3072:i+cLzO4E1FPoL0R9LbrCUUj/i+dPHGNqfkfU97dma/6mE8+rG:2LzXdPHUUMUFdT/6LNa","tlshash":"2af38d22bbc3da4fd2131e7cafb1df64a42afe2266110357f6461d6b9c4237448da5c8","first_seen":"2023-11-17T22:33:50Z","last_seen":"2026-07-31T18:55:06.059705Z","times_seen":320,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Frame-1000002895.svg","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Frame-1000002895.svg HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69af2368-17775\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 79B4:1502:9217EC:9382AD:69F947A9\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.410308,VS0,VE188\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 837d6cc0a573ff2cc8179347cd3be4916f3043f6\r\ncontent-length: 72410\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96117,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cf8fe0dca7e17cb198743a5ed646f6a","sha1":"5f4a7c8c2a86e5877f07660f36ada5b9a146c9b8","sha256":"d03d53f8619ddb816b65b1ec784fcadaf0710775619088d53e717375926e5875","sha512":"eebcf869891c9d9b234963b691530e24a394ee2a0a63375850f9ebeb53cf5e33bf6d7649d114bdad9b802744e6e15fb56e021e2a3b8a22428360314c1137ca72","ssdeep":"1536:xxyttY/4rU62IxXwKOKI8cFLExwW5pnji1au3nfTRbQzr9RKWDkAjPle2/I8v:xA+4rpxOFFLEysneUuXfTRbQz5RBVJeU","tlshash":"7b9302127a15ada5d6eed63080282f9757e448239f38803dded948992fbffd82cd3501","first_seen":"2026-01-11T17:37:23.377781Z","last_seen":"2026-05-05T01:28:43.104066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-05T01:28:08.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69af2368-fc9a\"\r\nexpires: Mon, 04 May 2026 23:35:08 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: E352:2FF9DF:EF177C:F14A57:69F92AD3\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:08 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.840145,VS0,VE126\r\nvary: Accept-Encoding\r\nx-fastly-request-id: aa77c611807f3a5dd7ecc377731dfbfa959e08af\r\ncontent-length: 11197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64666,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1652)","md5":"6686f7f24605b7a689c65808c9054def","sha1":"df62cb2d1bc5a77901456b6a9e2bb6b4f8ee81f8","sha256":"ed6c6182f2fd39e6af59a7650e322c71f422f81f0d79ead8aaeec4f917a0320f","sha512":"2ed793ca47c8cde3ca6891276483cbc90bcbf75b6d979bfc8f339a1c59de26dda3b708656ff41225657ef64d0e0ab6425a42f497bd8dccc61282066048b6cd2d","ssdeep":"384:ekLITW/g/17zm7xa6a51QbfllI+K+px1CyGm8WjLSsix3WrxLrvWiWEhW/roG+DM:SmcIc+K+p7civdiro2E8Z","tlshash":"0f53963120f46137958282d4aa355b5faf92ea4bce5b965473fc0bd85fe3c86cc23489","first_seen":"2026-05-05T01:28:43.105021Z","last_seen":"2026-05-05T01:28:43.105021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":71,"dns":8,"connect":26,"send":0,"wait":153,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/css/normalize.css","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69af2368-1e5c\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2FE0:1465DC:100A4DD:1030AE9:69F93904\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.171149,VS0,VE130\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c2039040fe0b03be1c5300e9bb8290b4ff42f67e\r\ncontent-length: 2676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7772,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"afb4942e5838a7dc3b63d00ffcc87c9d","sha1":"f1a4ae2fbaa13ef9d9500648d5a16f7adaa88d30","sha256":"0d336a97efd52a4ef44ef3270e71eac24ba405d4450016f9d3e943256e9e58c8","sha512":"8b897ca084c9e5aba585a3c8036ca2b9e10243e262e93f0761635db00d1da2544803f8937163d278e94c4d6ff6b23031f87660b55a9000a72211bb27a3ebab7e","ssdeep":"96:MrWcFPpkRUwojaszRO5LVSrwnTgPjnRo5wUEKs2NE4P+49NaN71UB9:M/9pVjasdEvQnRo2UEKsSBP+W67w","tlshash":"82f1b59923a04b9252395df5f3a7938533481127832c7c6eb4d240fc8fc8b5553baf99","first_seen":"2023-04-05T04:08:19Z","last_seen":"2026-08-11T15:00:55.465447Z","times_seen":3679,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/css/system.css","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /css/system.css HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69af2368-96d5\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: B380:26F5EF:11E7F6C:1211C1A:69F947A9\r\naccept-ranges: bytes\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.172137,VS0,VE123\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3de467d62688d385e15dac1f1380cf84dcac8f72\r\ncontent-length: 9400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":38613,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2587)","md5":"42fdfb47d0ddbfb1ffa45588f516bc07","sha1":"967e35c15e2a0d238743c4006a2d22ab5ec18244","sha256":"694acb55c05915c44ce251e328490afc31bae8f698017920ccd6976595141699","sha512":"8bae4273142915e8f3c16491d4abfcee061bd02255dba37fa69dedec1b1a05acfe5e4b9e77edd167be8412904881994fdde7dcb6f3b27a68f5b20a45868a3352","ssdeep":"768:ef7A1YRQ/VHrFIfoF7GpFMDw82aWoS+lyKA+vdxxF3F5FiwFt24lLqClUZ6CE7WM:t1YWtHr5KCPxljdRLqCqE2kQG","tlshash":"4f0395b58bf40620b817c1a56890a3657f2d4003b74ede28bae1741fdfce1c79963b69","first_seen":"2025-01-10T08:31:14.552489Z","last_seen":"2026-07-21T22:43:12.236594Z","times_seen":437,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Image-9.avif","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Image-9.avif HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/avif\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-15495\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: D07E:31BF88:1075899:109BFD9:69F93904\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.175284,VS0,VE146\r\nvary: Accept-Encoding\r\nx-fastly-request-id: cdb5e91f04047171d87d43480c2723586f0cf9e3\r\ncontent-length: 87189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87189,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d0fff10670273d8f7b14d55b778e3d06","sha1":"0efc8291c7960df0f1f5a4e4d251647f5c1b98a6","sha256":"8b4247dba4de1acb5914c2409c05120e0a40ec1a099436f23515514a6189c6a4","sha512":"88707f59b18ea72f0770a873cb16f957f80b05a990ba6854d3b099c6b786f3e6ff34d1c85fdc5d744e39d38786bb75544e3dca1abb66cf0ff613837b7d27d5c4","ssdeep":"1536:KKOFlwtGzobEUajw/Iaumvpf3nTuTfWe/pVaaNYW7ei4HkGPT01v:KbFGo4YhpcpvY/pVaIV4kGQ1v","tlshash":"058312523fbb21defc5d3cb9450a7c54862229ec925e24224125e9bec34f97ad890f1f","first_seen":"2026-01-11T17:37:23.376774Z","last_seen":"2026-05-05T01:28:43.117198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/video/coin_animation.mov","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /video/coin_animation.mov HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/quicktime\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-405608\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 185E:14E7:C7D0A:C9DDC:69F947A9\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-4216327/4216328\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.230088,VS0,VE443\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b5012e120e648c3759786e6441fe7a48418d7cd9\r\ncontent-length: 4216328\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":212983,"size_decoded":0,"mime_type":"video/quicktime","magic":"ISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT)","md5":"e61608ad85c4ebd4a564a705deba4cd9","sha1":"3e530638a1be44e8662a6facb504153ce639c723","sha256":"07896b00c5117f273bbaffc90544a90c4a5ebe8b13a7ee79e16013d537cc9d29","sha512":"9fbb17e500fbc1ec72ea0b6c57d708e8f194ddc791330b37a2224fec3273245f31509adf9da567197475586b3565d5870611c82b1f8bfff284a8bb28d889b190","ssdeep":"3072:J12VbxPDjFo+4UoSgIgvRv+j1N1ghI7kOPOmvA4dYH1Y2NSV6i/gBy:J+xrjF94UZNM+j1N1gKPOxRHqH0y","tlshash":"032412a09cf385e5ecbd51f700251c7d630e41a61e28d7c3d6aadff2d269981b228dc5","first_seen":"2026-05-05T01:28:43.119142Z","last_seen":"2026-05-05T01:28:43.119142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Dashboard-n.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Dashboard-n.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-13982\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2F40:26F5EF:10893C4:10AFB75:69F93904\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.414590,VS0,VE135\r\nvary: Accept-Encoding\r\nx-fastly-request-id: dde3a6dbed223bf277ce1af464ef5f615012b231\r\ncontent-length: 80258\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2400 x 1578, 8-bit colormap, non-interlaced","md5":"587f1f2d8ed17fff2f57401e6b0e10bd","sha1":"13b9483bdea5591cbbe23e5c0a7f7eb91acbff6d","sha256":"186192970402372f3faae41f9845611da75b363b5f61ea50b495f633f847b32e","sha512":"835fc8a39c50b1f7e4a18b0ae6e1e20e508480108e2dc73a4725802bd616e6b0b14c5b71516fe58b627bc9f5598435726652c2d5da023c4951313a8bbe40e05e","ssdeep":"1536:/kjEaWYwI94UmROnbJXXX1XwoFqxqKg+LIZRSTwUY9DSRFOkqK:/kj8IG+nbJFhFfIVwUm+qFK","tlshash":"6c7302216e78422af981013b88d53c9afea07b722ad45cd3253fd57b14ef358371e826","first_seen":"2026-01-11T17:37:23.356003Z","last_seen":"2026-05-05T01:28:43.120082Z","times_seen":3,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/css/main.css","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69af2368-1144a\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: D45E:1526:21D463:222F34:69F93904\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.172562,VS0,VE128\r\nvary: Accept-Encoding\r\nx-fastly-request-id: ffc9c3d9bfe52602b57b77e4cb996def0387425f\r\ncontent-length: 11654\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":70730,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"assembler source, ASCII text","md5":"f7bf7ad657825e40ed7a5e7f9a02b441","sha1":"4d2262a37ffc851edd00994299aa2ad0fc7adb33","sha256":"776f03dea74d1df4528c39ae67ed1f31e8124f3db281dc39aaa8d89c34993ecc","sha512":"74d7fcaada1345217d9b8e2ebe1828d62d4fce0d0b79f7aac20709207c6fa51eb7fce9e737edd69c87d3a7bdee963168092a4fb4e7ee12b9db88744c50ba1077","ssdeep":"768:sybC67VUwSbCh7Rv9EUOaQ5DMwbYuA6EViojmDtI:jbC6eJhYuA6EViymO","tlshash":"5d6356096ba12908755f90fcd8ea76d4a32e4047cf0ede9979e27058df4c3d93872ad8","first_seen":"2026-05-05T01:28:43.120956Z","last_seen":"2026-05-05T01:28:43.120956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Coin_1.avif","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Coin_1.avif HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/avif\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-1f9a\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: FC4A:26F5EF:11E7F8F:1211C44:69F947A9\r\naccept-ranges: bytes\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.173327,VS0,VE209\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 53f2a87c2235644563f13122a5086052b7498396\r\ncontent-length: 8090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8090,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f20026b5ed1ffc19444e59763f128abb","sha1":"98cf11c509d270a0042dd16cd8199c7749a49123","sha256":"fbacef20ac68f2f00ad6a1d78ac07f72bfbac7be11d0536d8d3111433e6755fb","sha512":"0231bcd0222b883dc382e360da992e187aea86039e45396dd70f027f9c53983ee78ef8415aaf078e9863871370b1cfec72645a0e0ab22642d0426081829fc6b2","ssdeep":"192:rGDTMNJMqx6rRcqGqVp+NhsL0gwI7A6Per5nKUpRQMsUTmJ18Cjn:rUMHMqx6rRcqG3NhsIgwQA6o5Xper8Cb","tlshash":"98f1be37c7fa1d2bd4580075bcaac8a690318082ea4f18d12ad1e5b887bc75360a3f78","first_seen":"2026-01-11T17:37:23.358511Z","last_seen":"2026-05-05T01:28:43.121832Z","times_seen":3,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Coin2_1Coin2.avif","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Coin2_1Coin2.avif HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/avif\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-6364\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 0D14:1A5491:11A985A:11D3371:69F947A6\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.174805,VS0,VE161\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d68da4c9b8ca74be5558b0ad270582e6570f14ab\r\ncontent-length: 25444\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":25444,"size_decoded":0,"mime_type":"image/avif","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x654, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4db08b4634768f3bc9f3ad24769ad17f","sha1":"c2d36ffd93821d2fccafe9b61c1147e98e2a2bcd","sha256":"819668a3100ed94f701bb6f48a5517266f192c589c5c9416d08fe14ce7b8132c","sha512":"9b9018479d8ec5bfcca22e451c7f3c3d0aa2f66553ca2b1759631de0b35ec6225611a3ae38b3d2c642eab0930247a7b02539bf9051e25ddf44cb5fdee889ff48","ssdeep":"768:hBaAofIyCUC1KQ4sD8h4nwFkp+WCzZcqxWk:zeIydCZ4gu4nwFkGcql","tlshash":"47b2e01e1873d7668cd6ed393c673e88da1ceaba1768c4d01122d76fbcb8908f08520d","first_seen":"2026-01-11T17:37:23.375806Z","last_seen":"2026-05-05T01:28:43.122809Z","times_seen":3,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/haveno-logo1.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/haveno-logo1.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-911\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6C3E:FADD0:1051DA0:1078448:69F93903\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.410677,VS0,VE122\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 15140b1fce9e68196d3d7e87dc3f37554e496212\r\ncontent-length: 2321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 48, 8-bit/color RGBA, non-interlaced","md5":"062f14e96c5105496e2036ff9b5fa9b0","sha1":"ab13424a92ec6f3280eece47bc1c1b49aa5c323f","sha256":"1d8744c9f919de7e4cc2fcda372531a52aba2150c5f9cd69357fcfcd53d847bb","sha512":"7e5cfd73bc79b3d128f186c4affa9f38a5ecd3f140da19331c7c607d8fa233689e885025c1ca260d51e9c6a3a3d4ab2ab83c4943e7cb1edffc80020241a1f9c7","ssdeep":"","tlshash":"55414eac97a103edc0b4c0cd4b23605f56f41b383a72790ada20775ee5a744b7526f21","first_seen":"2026-01-11T17:37:23.363969Z","last_seen":"2026-05-05T01:28:43.123996Z","times_seen":3,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/CardBody1BlurEffects.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/CardBody1BlurEffects.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-1acd\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A620:15FEF7:1020D43:1047B1B:69F93904\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.414010,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 229fdd3aead95143924ca7a4467eb2d9d70094c4\r\ncontent-length: 6861\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":6861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 376 x 212, 8-bit colormap, non-interlaced","md5":"9e7452a76c2601fec09ae564dccbcaff","sha1":"b57c98cb52ceb42d61917c22cb3212b0b7390975","sha256":"16d6bf467ca232a66e5df291645924126824244cbbb94d85ac635f069bfb1b5b","sha512":"4807d1acda303ffe2c8b219afc18f033bb699e2fd618cd2ce130f639633c910cddc9c5e88dbaa42b5aa9c6c9aa12933970f530e83a2a4fbf605199fe9d564ec6","ssdeep":"96:DMpw/HuHMYwNcJ8K6q9t7xiF5NzMNpN/914u3PtozllXq1pYmD/XMB8aYbzlub/3:DMm/OZwsbtgFTzMpXftL1pYWYY9I3","tlshash":"87e19fdea71c869e4f64b872c5237687e369fc135a98e4a570e4b20ba433974d388215","first_seen":"2026-01-11T17:37:23.370418Z","last_seen":"2026-05-05T01:28:43.125051Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/01-fee-dot.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/01-fee-dot.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-fce3\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3F56:1526:21D4F0:222FC3:69F93904\r\naccept-ranges: bytes\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1777944489.416094,VS0,VE125\r\nvary: Accept-Encoding\r\nx-fastly-request-id: ca390a37613fb8739eb04162189c8f58dbd742c0\r\ncontent-length: 64739\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":64739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1264 x 960, 8-bit/color RGBA, interlaced","md5":"d68084d6685f7c105b08313ced8693ce","sha1":"5d7af28919ad5d11ea6161fad2bced949be925c3","sha256":"cfeab983906afb17c189f347befd201fe913f8a923e7d4786e0c23324cc6d5e5","sha512":"cc4b8431313a414eeb16fa9a7c804444c2c0e8cad82dc3f2152c5af5235e7c5b6cccaa74831a35cbebdbfdb09f2769fdc4f7cbbdbbd36fa62fbe7560fb6ed708","ssdeep":"1536:CJik/kuXOHdo89VA8ZslB0GQcVXeLCTZINoJep8KI68O:cikc/j9VhslGLCSOFPO","tlshash":"7153e1f01661950ffc6a10f5961f2dbfaac102746c1436a2c9b967ce4c6978c6836ccf","first_seen":"2026-05-05T01:28:43.126103Z","last_seen":"2026-05-05T01:28:43.126103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Bento-grid-3-p-800.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Bento-grid-3-p-800.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-1c2bc\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 79B4:1502:921832:9382E6:69F947A9\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944490.598108,VS0,VE167\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 36637d0128f7a7eeb0b7d0a029abb732a384a8da\r\ncontent-length: 115388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"805eb084e82adedfd3dc3474c0436269","sha1":"45cf0ad2feb39da7ec114f4bb6d177cb51862bdf","sha256":"6cf98d6a7d5910070fcfdd1dafb89e9b7c3177291a29d686586b932a0a9265c4","sha512":"d045912c430c3486a2bc26b32be7d4b11882b00fd6106eea946c7d70ec0481aafebb28e753a591c1a41ffdd1cd75b7d55c1c9bf2e7e26961f3fd652c51c7da70","ssdeep":"3072:EQdc1a5VeFqvMyt0gS0l7lVPG7TyR3nJY2Q3+z1:EQS1aJvVZlVPG6XJYp3e","tlshash":"e2b3123fa28e6672e2c5559d08b1bb4d0450b2dd21fb4e141e9ec8edf2812658767fb0","first_seen":"2026-01-11T17:37:23.380001Z","last_seen":"2026-05-05T01:28:43.127313Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":194,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/webclip.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/webclip.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-103c\"\r\nexpires: Tue, 05 May 2026 00:35:41 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3F56:1526:21D5C6:223090:69F93905\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944490.820203,VS0,VE121\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 6580921073633f6e529beef911acfc8b4913b609\r\ncontent-length: 4156\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":4156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"c68117031aed2324e51f8825679cd1cc","sha1":"f6c7c7722dd74e6aad1a681c83a607433460a357","sha256":"2e9d2734a2ffd04c235316bbf9879ecce08c43900551a21289b30eb39171ce26","sha512":"d35fd214defbb77c9a02285fe20912b88526a31c5387495b9287acf1bee26071c261cc20bbec903f43c882fc33e1bc4be8ac7cbd80faf9d80cc3ebf71c782aff","ssdeep":"96:1S6eGR9kyxrIYbM6go5vYo8ElTox10EunXuRXnLmxbU7:1Ss9BIfRaYo8ElToOTACx6","tlshash":"a8816dc55332554a921da37884f528f1ae9ff86603bc077ea829bf09739e1402f18b73","first_seen":"2026-01-11T17:37:23.381243Z","last_seen":"2026-05-05T01:28:43.128204Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reto-swap.com/","fqdn":"reto-swap.com","domain":"reto-swap.com","tld":"com"},"ip":{"addr":"172.67.147.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-05T01:28:08.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reto-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 12:56:46 GMT","end":"Wed, 08 Jul 2026 13:54:22 GMT"},"fingerprint":{"sha1":"8D:52:6F:19:77:31:5E:82:8B:93:CE:5E:C3:7F:E7:C2:A8:25:F1:CA","sha256":"9F:E0:5B:B8:9F:5B:B2:4C:C1:72:86:33:21:37:71:DF:46:1F:4D:FB:33:CE:6C:58:71:30:AB:DF:B2:84:37:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: reto-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 05 May 2026 01:28:08 GMT\r\ncontent-length: 0\r\nlocation: https://retoswap.com/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GoF%2FlFTjxjGmVACd2uWyqQ7xW5vO4Pe3wAev4d%2B%2BI3vjXw%2B1bA7VHYYIiKArjNY5BMFBWi0KS%2B5EJp3z0bZ4AtJJURYihhXOr1wcGgMU4KKpPSB9jpYoCZZvCXEzLy9q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9f6bf77e5a14723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64666,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T15:57:26.494444Z","times_seen":17839182,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":50,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"reto-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Gradient.avif","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Gradient.avif HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/avif\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-166a0\"\r\nexpires: Tue, 05 May 2026 00:35:40 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3F56:1526:21D48F:222F6D:69F93903\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1777944489.173885,VS0,VE148\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8425d2a2893d7a2537ecb6042cfb912f93af27bf\r\ncontent-length: 91808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":91808,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f12281db9590adbdb21300b50a2725b9","sha1":"06a976172a6c471e38e53d7e5fdc515565f1ea9c","sha256":"3a951ca66e158401f9ebab268daa1ba5cb6fb49aeab0ece9647dda6001773efa","sha512":"b09cbd899ab17fe9c6f2359fdc5d3ee5ec13b355fb032fd6c7688233a76e0b8408ad0e6cf3e1f1c58798ed22be8f6e11f1cf083b290fc5f9b72235b61f092b6a","ssdeep":"1536:5F7t3m7ckmHLH/43hyzRA44bljyllw9xkq0b1NYpURL+vSmzo+uQzASiaFEP:5dgRE/QhyzRWxyjukhb18Urxcty","tlshash":"9493123ce7745172ea7d6fb50a4207c95996cb8580350e8da7d718ee813ead13cb7c22","first_seen":"2026-01-11T17:37:23.368568Z","last_seen":"2026-05-05T01:28:43.129735Z","times_seen":3,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retoswap.com/images/Group-40275-p-800.png","fqdn":"retoswap.com","domain":"retoswap.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://retoswap.com/","date":"2026-05-05T01:28:09.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retoswap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 06:05:43 GMT","end":"Tue, 23 Jun 2026 06:05:42 GMT"},"fingerprint":{"sha1":"97:2F:0D:C6:C9:CE:8D:DA:CB:EE:46:D8:06:A0:75:39:05:C6:0C:2E","sha256":"15:D9:6D:07:B8:18:90:AB:03:B1:6B:53:E1:F8:EA:7F:D8:A5:82:AE:B8:C9:A0:C8:0F:30:3C:9B:75:32:BB:70"}}},"request":{"raw":"GET /images/Group-40275-p-800.png HTTP/1.1\r\nHost: retoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://retoswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 09 Mar 2026 19:45:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69af2368-1e97d\"\r\nexpires: Tue, 05 May 2026 01:38:09 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: B37A:22BAD6:11AE36A:11D7EB9:69F947A9\r\naccept-ranges: bytes\r\ndate: Tue, 05 May 2026 01:28:09 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1777944489.177661,VS0,VE233\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 94b39bc8cdfc617237cbd6ad51f7cb4622e1e1ef\r\ncontent-length: 125309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":125309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 836, 8-bit colormap, non-interlaced","md5":"cd46d5bb32c7025558bb41d1daed9d69","sha1":"71e1b84ccde390f8227e220f35e6fe4adf6655f9","sha256":"8f1345ce00395219839e8bab5374d76aa3e15f302439ff5a7fb466c8d1a080a9","sha512":"7c69ea6d1e709d2609d40cd1801d3966b2b577b2f9e72d729ec6fe153ff2f5b8f7cc4a5f124759e612674d3daa0dc8c87aa45c58a0ca95c12cec01cdab68c9d0","ssdeep":"3072:DblVV3maw6ai1Rz2ri7+19QlfT5GznwPV3vU9O3WYNU2G6gnC:Dbxa6aWRzd6kltB3cC","tlshash":"2ac31252e1d14c75fbf275e17bc708b867bd0406ea857498d98481c30e99ecbabb3b21","first_seen":"2026-01-11T17:37:23.359469Z","last_seen":"2026-05-05T01:28:43.130639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-05","alert":"Sinkholed","trigger":"retoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}