{"report_id":"a0fd5742-0337-4383-9e7f-d2c943b4372a","version":6,"status":"done","tags":[],"date":"2026-02-14T11:48:05Z","url":{"schema":"https","addr":"riftswaps.com/","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"104.21.86.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"riftswaps.com/","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"title":"Rift Swap - Effortlessly Swap Assets P2P Between Ethereum, Solana EVM","dom":{"size":29808,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1226)","md5":"a26bdedb19f58ef51484b4db6464ae66","sha1":"db9fdaedefcf81928ee7ad78763450667241c637","sha256":"d1e5adc5f3d3cb956dbeb0ef0c838f9d44a47513f927a69c61f10ac6b398f9f3","sha512":"b5c518bb622e2404b97b252a9e5e8d93a8218f0c76487abf2a2e42b5c328f4b031174e7e1bcda837a7a88b24d25f3336e44d11bbd7de5721abbb9c9cf6fb88a6","ssdeep":"192:BOlN467D7qpSwq15RMkLJtCrdwMMOsq+Nn1chp5JM9TThSNLyBx1VoMpH8EV7bBz:BOlN48aqBY+51cgTTKYnX8EvCm","tlshash":"b8d2826141e01177054381e15aa77b6b6fcab80bef0708417afd43c86f8ae96cdb769c","dom_hash":"domhashe1ee4f4ccdc38341a437d03c9ce3b9d6","first_seen":"2026-02-13T05:55:37.071709Z","last_seen":"2026-02-14T11:48:07.386541Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"riftswaps.com/","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"104.21.86.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T11:48:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"riftswaps.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-10","domain_rank":0,"first_seen":"2026-02-13T05:55:34.749984Z","last_seen":"2026-02-13T05:55:34.749984Z","alert_count":29,"request_count":29,"received_data":1021352,"sent_data":13006,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"riftswaps.com/img/solflare.svg?v=1745308677","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/solflare.svg?v=1745308677 HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWtOXOpSZnlKcujwV%2FTtskySwHeDTIsr8vZ0obt42aP%2F0dTNuKL5%2B8upAbpJGUAtK0v7iWt1eTWGDZDknE3O3LNhPBiH7SlgPNJpPhI%3D\"}]}\r\netag: W/\"6912437d-bf4\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118db94453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3060,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01f2ae398554732a6ec8388e425f8b73","sha1":"52f5e3f3fea3d747835af4be06e11c8a3dedb115","sha256":"5a7e3f1549f1ae6d48e9700d3b4b5595a3c3f83d14292dccd761897d84512755","sha512":"c5cd19ab3a2b08e1e73a8f57139172b5b76d482ebbb5163eea3fa67c81835fadbf974fab35725d20357854cc769aba772bdfa069e720d5cefe77a42c1929f40e","ssdeep":"","tlshash":"4c51a7d8eff1d3f898864bd6e7607db8252a1569aa32c798c67b0e042d83d1c4e548c1","first_seen":"2025-08-04T13:12:30.142005Z","last_seen":"2026-07-26T03:16:13.316761Z","times_seen":7,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/circle-1-sm.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/circle-1-sm.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c56lRZCFQ5kMs4tEB1Jgzrnwlr6t2SlZcr9AbR%2BQQT7a9BNpcGkqKZc5xRyYfDzidXIak%2BRkj5gKb5Xk6GdNZMd%2BkplPvZ6%2F8bAOaLc%3D\"}]}\r\netag: W/\"6912437d-15f6\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118dcc4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5622,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a89d0e0cc79f80d554089d811b48e61c","sha1":"7eaf2293d990e5a1e0ca224261b3383af2f711a5","sha256":"1b84e99baf69ac65e15f5390eb7a5809b1beac3ef7231e74ce9cdb6e2a989d0b","sha512":"a26e68a9c3816c2b7e77edae3fbdd45398a332969ec47f7ed5faba82bb719bc94232f47d4f242540fbe6b591bb568058fb493a310f88dfc074123a95a7491506","ssdeep":"96:uzDs0btDKpO3O6+s+TU+s3+s3+smc+shR+sg+s2m+s6v+sCe+sZB+s8J+sQ+s+rc:u1t6O3O7s+TdsOsOscsisZs2ns62sCv2","tlshash":"65c1f07dea3d7833d55ad3fdde80a4ad204a55ebe5c043b995906b1f602cac30e0dba0","first_seen":"2025-08-04T13:12:30.157505Z","last_seen":"2026-07-26T03:16:13.365118Z","times_seen":10,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/favicon.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2%2FTirfyqgWQWqHgUSQE5pGxj72rH3SULFtqlMDu4m1ZvoQ777CMyPQwJo3lurQ%2FFGUfYuugUdRJfkF0SeSBo3vdK0wdCZH8MP%2Fjgzc%3D\"}]}\r\netag: W/\"6912437d-21b91\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc5512e92a4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138129,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17d5a62186abd1ceb79502dcda09ac11","sha1":"47000155374c021697c6d9ad7fdf724678a3432a","sha256":"d95662ce008456f797e3eca16456ba94590b5b91af398a70bce2ef65079673e6","sha512":"1fde9fbf9d4cdd0eaff40b25e90e8cf93cebf92045d95eafa968365ca43294bb48065c26a0dd70cb7303272f4047c415a9988a899bf76307f1b4c23e7a51f126","ssdeep":"3072:N8off28+iD9zlICFZ0cNIEzFgEv29esI7fite+djTc8l68blylxYz:N8Mf/+iD9zlIy0cNIEplv28T7qEAtl62","tlshash":"d5d312747918cf38ddc830ad800f58c26fd61a48c1a4369e679769d958fc70dae28ada","first_seen":"2026-02-13T05:55:37.085699Z","last_seen":"2026-02-14T11:48:07.391564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/assets/fonts/onest/Onest-Medium.ttf","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /assets/fonts/onest/Onest-Medium.ttf HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbuktEfaEO51ONymtmF9CbzfpQT9njTmIxN1nzPz671pElzVBIhROiTndTtqfqlmrr7jv1ldiQAovX2NWoIi36f7sVcFulghd19iiYQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55132a114453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/hero-bg.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/hero-bg.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JUzG3e0eEb2YezHLJbsP%2B7%2BBL8tYwQ2x6hwRJjO6DTvGTMb5gSLuHjLnKHzakpr433qnaXtcRJbAc5t1Pzwq%2F%2BwhDJKNctKcBZ07nw%3D\"}]}\r\netag: W/\"6912437d-2f78\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc551319e94453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12152,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d71644cd2fff1039ca76af0d732af02","sha1":"b755686336f2324ce59e91ea83aeb4fe49ba8d24","sha256":"03e10db850c283e5dcda5456b6161680a268382849f257e7f01c6b05b41a8f7b","sha512":"247756d260603e96b118313140571e99367168b1465aa6426d51bc1f2bc199dce2b37f75b693f25e96bd30f1911dea448fd3ef01f342476bb47cff7d446fb639","ssdeep":"192:ZhZ19MvDYgcCe85a4VdzQDYUp/Wuf3u4f1e+mr55Z+hkn7S9iftAO:X6vDBcx85vVd0sUp+uf3u4f1e+mr3ZUE","tlshash":"2842f279ea2d3cb7d29ac1faecc0d55c120b12e795c443b7d2218b6e65386c60e0dbd8","first_seen":"2025-08-04T13:12:30.207512Z","last_seen":"2026-07-26T03:16:13.324654Z","times_seen":10,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/zokyo.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/zokyo.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RHY9SIbI0zlTlkuoOHF5DrNxit5sOkH8dI7TmW7xQ6GVSf3Fn7%2FdHEMAhJHkwKqQdtRewKda2JxovfnlV1iPMprBD5tSUvXbKm8ON8%3D\"}]}\r\netag: W/\"6912437d-84c\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55135a8a4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2124,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e29446d9915ecaceeea6e1075b6cb626","sha1":"d75c585a00ec17da2d0860094a553db8236517c0","sha256":"e2b0b58519526804bf818bed30c30f2dc89f0f8a9d67764144589b8bca1efcff","sha512":"2afd67ae4e8f4d9cd3c20ccc47005734f649180ece50c7c5f41d197c448dd09a052f46fc9ff2f2e9217b2976e60b9153dbbbb9d3f41c606ec356401d5292a3aa","ssdeep":"","tlshash":"2241146a277061ec4bcbeaaeee31559cc30b58f0f26a40d4ab5f4f58548b651f702d34","first_seen":"2026-02-13T05:55:37.084045Z","last_seen":"2026-02-14T11:48:07.396983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/style.css","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\netag: W/\"6912437d-31104\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W82S4nCxRgket2Qk09KjxdfCKQw6HSU99PgxFR8MrNUMpn6ON37V7Vqz4lVwTv8zY95%2BIO1%2FB%2B%2BbjsLMTpfJHjoF3%2BONsWbikr5XCtI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc55117d8d4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200964,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (323), with CRLF line terminators","md5":"22df2462db5174883049435e0c8db857","sha1":"09c509cbdb2097219af5bf7d34d7f521c33f0288","sha256":"5fb6f500615629f10f0df2cf148797a51c974cec047c7bd09f0b88275e32e174","sha512":"9397b28c65b4ec95847f2d98310eb6a6de3aaa1e4cd63751ebc950d4bbb7826d830b56a4c29352d2c33969e84d66d57caaeab3a0ee9fa2cfeb8161a5e3250020","ssdeep":"1536:zcq4HvjqfpCTkFXkctwOU1ygJTbzqjcYn6cWPtTL59flu2jDGm:h3U1y4zqjcYn6cWPtTL59flXum","tlshash":"67146159a943100156339b79e7eb376dff2a50238a0245a4becd32658ff93f48291f4e","first_seen":"2026-02-13T05:55:37.075762Z","last_seen":"2026-02-14T11:48:07.399978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/rockaway.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/rockaway.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSqt2m1bdyK8TQrsGRDp8JtkznBtoGU5w61B%2FaPcw7UUZtFNcgUxuN5Y1hGQ5saqFkJGCDT6BU6LOuaGOUWYplydY1p4YuZRPxdsC0E%3D\"}]}\r\netag: W/\"6912437d-4dc\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118dc44453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f610946c3214025d44851fb6563444f4","sha1":"e65f5366ed7201351253f8e2e9a0dcafd2bd412a","sha256":"1a6870037ced2e804a30a747e8bd1d519aa13c070d2b0833a5e3388e1333fa8d","sha512":"5395d017c4b62d184a0b546e00465b75444ec88904ac69e235303d91b4426dc457ee56dca61193ed8faecf19b962ff74f693157f5faa6a02693703b013085521","ssdeep":"","tlshash":"b52162cae01434f8dc546bec1730c9f8702b64fd3235caac8526476393c6829588858a","first_seen":"2025-08-04T13:12:30.072162Z","last_seen":"2026-03-06T22:00:30.009117Z","times_seen":4,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/hashkey.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/hashkey.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmj1v56wLVHJUfRG%2BWrNtwA2CGhz7H5qa3S8S7whIadohnW%2FrBQzOQi2U8kMnA29rXfmX2ss%2Bu12tgB6icdjpA64oLr5zCRkUc5I78Q%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117da14453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/jito.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/jito.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26P6de3GVkjk0KKOteNA1KEwv6Oawm7rPcki%2FLE4%2F6vkZJVqGVH78mpbdZafSmv75XWr0U2Wkj7wMzxkr2WwXbq0kHCxCSHNhATF4DY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117daa4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/okx.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/okx.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9Nm%2FaXYhcT19qqjyjbNl7RSEDjc46jy8cLLnV2rYBbvYPFVBysGrzOxceMzHRd4DHFbVFcUfrU9p1XZ4gQffgI%2BGun%2Fz7dvIsLDjmk%3D\"}]}\r\netag: W/\"6912437d-8ce\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117daf4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64e14a97175ab747b45b7a0a3ada1d08","sha1":"32edf7aea226c51a29bccd1042cde592930ebc2d","sha256":"3b62203b055025fda900f322c443f802f00222f6f66d8e57378a0730284183fa","sha512":"c563a00af28d4be3402cfbb904c904d53c3ac1d8c4ccfaa500b57a722c88f20a29688888f45dadfad576a608f4463ff3f02bbcdf9c38b672eeb64fa8bc3a4030","ssdeep":"","tlshash":"fc41115abb308efc16066b18ef3b17f83602ccbec5938688911b5589d9cf6496304a69","first_seen":"2025-08-04T13:12:30.148278Z","last_seen":"2026-07-26T03:16:13.392391Z","times_seen":7,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/jupiter.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/jupiter.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKR9tCdm0%2F3aNSa2rVyzmwa69MAONb02AAfQvRaaMjf9uu69HB%2B5btEfQoImHkFTaeQsUhCtoKCPkdMM0Kbas26231ocoGsw6HwnNHE%3D\"}]}\r\netag: W/\"6912437d-15d6\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118db44453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5590,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efeb390fab3d14c5c80e9dec6fba9172","sha1":"80df3d03690c23ae42df174c2b42d6d057c9568e","sha256":"056fcf6484b3b468d69f8c455c50be981dba3df5a34f2638fb855a311417b052","sha512":"f5a8d3e21c039a54e4bbc002129ff852d743a995d317c8f819213c66ae596a1f987175ed991718e96b6808d34017af72a8b36ee7055fe12899fb5e860d1adf14","ssdeep":"96:+ExCFEp1CinplzfLhL3ERSbJD4mDCHCGwk7Mk8CUio6Zyio6ZHio6ZMio6ZJio6W:+E/LPplT13EMpDCH9gCw","tlshash":"10b1709ac71854bfc9abc26cdf06a472120e45ba79d1878692bdcb2e1003987dd0ef60","first_seen":"2025-08-04T13:12:30.127075Z","last_seen":"2026-03-06T22:00:30.01071Z","times_seen":4,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/circle-1-md.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/circle-1-md.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkpDp%2BBd7knn88c9soQkslwrpA8RHBsokwB0N8YoKHd%2BBHaNG8T79Gos%2FQ0I4Hw6alhkD7CFYp1DT88D%2BqNjqeJgzcvAkc38Vg6GBn4%3D\"}]}\r\netag: W/\"6912437d-1559\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118dd34453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"911777a0943b260f1be7f27305f29307","sha1":"ee0ce76608aae7e714081774dffda35436ee4461","sha256":"ea633575ca6ee0ace42262bcb766cda48817a674ce347a51210573ad3518bf47","sha512":"3b3d32e1f8f816ac76eb23345d37e8a9824d2cbfed8e75d29ca1633ac45eb7df03ee02615ad2449215a99e8fde93414d461aaacd1a1440d0e2a58de6d6edbde1","ssdeep":"96:YzJKhCEdLAMy8SUcS3+s8+svy+spA+sq+sgG3B+sg+sF+sX+smsz+s3w+s7+sp+R:wIhC0cMy8SUvOsVsvjsp5srsguAsZs0A","tlshash":"36b1c07de92e7d37d21ac3fded80a49e204a11da94d043b69551ab2f612cbc34e0db70","first_seen":"2025-08-04T13:12:30.177562Z","last_seen":"2026-07-26T03:16:13.353541Z","times_seen":10,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/immunefi.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/immunefi.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1No4uESjh9OHY3v3iKMDTqS9alXgjS4uNKW9Cno0UmapQpD5sT67QusIg2KKZiuWZfVePO4%2Bt2jskXaaxm%2FRj5FjKvbt%2BD44mOPudI4%3D\"}]}\r\netag: W/\"6912437d-911\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55135a914453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2321,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a21579a062a859487cc072849ffde7e7","sha1":"07687d5de88cc7fc5349d4b9427c9a438cb2ce8f","sha256":"c877462b677ff5d9d35b8159f622d6e8e9298e0b245ff38d3c943e715871003d","sha512":"f3199385e8fadb5fd26ae9b7bbec2994a4a0e0c40323bab3908ec4a5c757be102cc09f263a661bce8b1e16bc4ab46c3ee7bab941fd6d8fbd5ae8ceb938349f48","ssdeep":"","tlshash":"db4163f10b70168161e30bb8fe3d48d62769f4fee12a46a0975fb80825a35fded08d00","first_seen":"2026-02-13T05:55:37.078164Z","last_seen":"2026-02-14T11:48:07.405248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/perpetual.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/perpetual.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aagbS1dRnxrzztwe8CVAXsxp6ldMbYpk0TyIGBO4dIXC9ABgN2R0a9pZJ4uW%2BZXQzzJyHJxUl2Vb9wXquGyKHmgznIDFpjoFLUkObHE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117da44453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/extrafi.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/extrafi.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1zFcdwgp34tJkVMDyPl7SDD5A8hmVy4nhLCebLIX4U4Z9agkxuKegbi6kmFNKjBtgQ9CVyCI7cgr5UntHDq%2B0e0tUiJswj1jhJUauc%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117da64453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/bitcoin-com.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/bitcoin-com.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEtJalqRTuvOeORt55%2B9NnvP0exooAvtJwFcTBb%2FV3c%2BPXiFyViq%2FaLQ5HhMyqBbazO3zWxH8BHiSUnCHLfTIUI3OpQvURk0jD%2FftOE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117dad4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/assets/fonts/icomoon/fonts//icomoon.ttf?az67px","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /assets/fonts/icomoon/fonts//icomoon.ttf?az67px HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OqfAD%2BLdZPWPct%2Bqfj%2FMHyRrOVqDRhOjZ2Qg0Gi%2F2uVVpl3mGgcwijWH%2BfwhFQHwqmmoQRDq%2BIQ4ZgY1ljGBTm95iurrvxatcPuTtn4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55134a4d4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/photon.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/photon.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIh90zrRVR7dtruv%2Be4oW2%2BMmvJ6iLlLwilCvl0QS%2F2b1GtgBoOGq3E0Oz27y%2BlmDIq8roFkuB0In%2B%2BaddNvrOG8aj1TkGzjtefE2lo%3D\"}]}\r\netag: W/\"6912437d-efc\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118dbd4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3836,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab6de5f3535343acab27f1b1ee03fc5d","sha1":"edce7578b4a85c9a88521022eca9b54c3a7b6a08","sha256":"facbd86f2663d618a66a643e8b4d45c2e2d79ef976853428d93842bf4b83b340","sha512":"8da8128c1b3acd67ca01cc448b2a76c5521fe37f01760179e2a3af206c2409f0ca29d22437276d812796608b2c950614a2835f86de142194dcadd65175d8002e","ssdeep":"","tlshash":"1e8121bbea5d78efe01bdabcee00a495120e20f9b4914765c26edf5e54165c7cc0de10","first_seen":"2025-08-04T13:12:30.133778Z","last_seen":"2026-07-26T03:16:13.339613Z","times_seen":7,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/trust-wallet.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/trust-wallet.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDXRWEpSnLMHAqDIxRZl6R9LJkcvidTZv3kiyAzRk9FIiFdk9%2BoVufDYD7QwZQozrvwcIzAPM4uhx6xTQZlgWB3V5rlGT1uibdI6CjM%3D\"}]}\r\netag: W/\"6912437d-5aa\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118dc04453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1450,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97a63df0cee2f15f16524b83ac35a3d1","sha1":"80de5db1270c63a30b075e0ebf88ef9ca8c9cc54","sha256":"cbf346371fe3517daa57a6d22d137b8a099a9ec5a5f9224ab5bca87cde123ce3","sha512":"8d598fa9b63976bbe2ead83724ae704942e3e077345e62622a20e664e166dca99835d053b11e7c629f811bd0845b186377d35f676abb7793c18710a88cef4a3e","ssdeep":"","tlshash":"37312209df401a7aec9687bdd811a0f11b0b90cdf3430b68e6b0c77b741558f88599ed","first_seen":"2026-02-13T05:55:37.087483Z","last_seen":"2026-07-26T03:16:13.373075Z","times_seen":6,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/style.css","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\netag: W/\"6912437d-31104\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r67P3YLwC0RuibivteY3sS8bp%2FrAY7nSVQzj3Ji9tcQZyv3h%2Fj4SwpVNCCu16sah3iWv%2FyTXvmMODcD0lq3betjwbOe93LDifzTlkbA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc55118dd74453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200964,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (323), with CRLF line terminators","md5":"22df2462db5174883049435e0c8db857","sha1":"09c509cbdb2097219af5bf7d34d7f521c33f0288","sha256":"5fb6f500615629f10f0df2cf148797a51c974cec047c7bd09f0b88275e32e174","sha512":"9397b28c65b4ec95847f2d98310eb6a6de3aaa1e4cd63751ebc950d4bbb7826d830b56a4c29352d2c33969e84d66d57caaeab3a0ee9fa2cfeb8161a5e3250020","ssdeep":"1536:zcq4HvjqfpCTkFXkctwOU1ygJTbzqjcYn6cWPtTL59flu2jDGm:h3U1y4zqjcYn6cWPtTL59flXum","tlshash":"67146159a943100156339b79e7eb376dff2a50238a0245a4becd32658ff93f48291f4e","first_seen":"2026-02-13T05:55:37.075762Z","last_seen":"2026-02-14T11:48:07.399978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/halborn.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/halborn.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4fT4WLO0sXET2m%2BVyN6%2FIOt0JWrEzAG908JOzYdsZ%2BLBkxmfpf%2FMMHnl214WKMh10anT6Sj0Hj%2F2VR%2FWQD1HZKQUyEEJsBql7nbrzY%3D\"}]}\r\netag: W/\"6912437d-120c\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55135a864453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4620,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad0bccb20bd7b9833b710f573f652ce6","sha1":"71a861c2ed7768de5cdf62e7164563bf61b0f440","sha256":"8ed987d3010e2b510abc3053423c3720777a7b43131db2e436d56765abef2006","sha512":"1069c40a66998a744e13e23588c8d3e945d48b329c64173a79519bd853f9c453b5be21deb03a96cac5db3b5fdf96f7261df1edd9413681b8fa300046e2408ea9","ssdeep":"96:4aBh6kyDPj5aK1psgItJNud5vDRjX0iX0C:TB0kyDr5j1p/ItidH0o0C","tlshash":"629185e62b74f2cdac96a176df75e892231e3479f572c1c8ad2f93b48003a85fa07504","first_seen":"2026-02-13T05:55:37.086625Z","last_seen":"2026-02-14T11:48:07.410426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T11:47:42.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrV2Lrq5x6o4YMY1lJ9IVkL7rbN6ktWkoEawP4IDuft4p3%2BHPCwclRMjtt4la8mi%2FlGaJUPLCuS%2FpvMPJS3Es%2Bfy0xVTmilK2CyMUR0%3D\"}]}\r\nage: 6692221\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cdc550fff3cdd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":74,"dns":40,"connect":8,"send":0,"wait":20,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/synapse.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/synapse.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gg0MOFByCG4Ob2hxtEu8fRwsYfGT4S5I%2BLHwpKyIt00zY844pqdoM4ZNwp4eh3eW3TGmnLPbjUFcnj3dA7Dxm%2BR3tZYZwWo5xukOlws%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117d934453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/arweave.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/arweave.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3AwLWP%2FDIC9PTaasxrY4DXodCO8T2xcM%2F0d0VwFingcI%2BBVsQp0PsDM%2FEa5%2BAWRe%2FBfCjO5DeJWw5%2BYp9pOiHoSOLRStTXk4VqyEFE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55117d994453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/img/phantom.svg","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:42.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /img/phantom.svg HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=za3A%2FdhcVy4a8ay9Sw0Xc1Ibxs3GrCbC2Cqw2NWQA4sXe9mmHaiGQpqj5drV0jTc4NIR8i6Hgj9L2%2BXRtQJFCbHBBH9msAYMBqUv2Ao%3D\"}]}\r\netag: W/\"6912437d-c0b\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc55118db14453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3083,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dca5349708bcd28e10284fda3e8252bb","sha1":"bfa6c64b1f8132114916431693bc2a8f2498e876","sha256":"5cd3a36b10ca58c5f6386f27fbc1245b7d9f0f61c22024b8ec5fd6d8077a5812","sha512":"606a60266bb14fe29d19bbb623a00e63c89f76d26c7dc039b2228b48750a19921d0beb912ee9eb14c48c692c84f37301114be71d2347954c7c25279a225d4d56","ssdeep":"","tlshash":"50514148eb7515f4dccd9b48732028f5398f497c3a729b9ca1ac1bb669d3d4a8960cd0","first_seen":"2025-08-04T13:12:30.136266Z","last_seen":"2026-07-26T03:16:13.3644Z","times_seen":7,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/apple-touch-icon.png","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 7225\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\netag: \"6912437d-1c39\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heEsI1UiLGelaIdPkPZfc4LbmX2Y4CIzGfNfPH%2FA5mCfaklwYtfBsbi5Owc5HQ1isv7sxAxuz%2B21L2xyh8gzc%2FTevNzQ4pnfg%2Fi5I2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc5512e91e4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"5d6ea2fce6cf010e274d39436685fe00","sha1":"6c6acc39a92d72f058445e1e59644d698454b951","sha256":"cd0094be05db12a6e79ddd9d180bf2ba9e1344d155e93e8377622b2ea0d52d0b","sha512":"37ada369e96e74c6a3cc541b8307f596dc611f04369d7d2451610eaa733fc2cf3fe727939f0cf5eef34600ce0cbf258b8f764502a0ff60d0763ad0524a5d3042","ssdeep":"192:1+KAnbaZykhiR7z+sY0Y2OboUjmbm8XBf1XpT:RAbarw7z5Y12coHm8Z15T","tlshash":"21e18d04dca85f4be3fc85009320b0352d7543ad7548a0da5cb726bbb4967dae27139f","first_seen":"2026-02-13T05:55:37.080052Z","last_seen":"2026-02-14T11:48:07.413589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/assets/fonts/onest/Onest-Regular.ttf","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /assets/fonts/onest/Onest-Regular.ttf HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4EFxRs8H%2FWQffUOolWOSUeSjWiGedJOQ7kQ7GALA%2FvhcQa%2BoDrJwyJNprkiTzTwKK%2FoqA6X36GNR3bad30yqYDu7MmKTRwQK84v%2FmE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc55133a274453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riftswaps.com/assets/fonts/icomoon/fonts//icomoon.woff?az67px","fqdn":"riftswaps.com","domain":"riftswaps.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riftswaps.com/","date":"2026-02-14T11:47:43.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riftswaps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 20:10:42 GMT","end":"Wed, 08 Apr 2026 21:08:29 GMT"},"fingerprint":{"sha1":"B5:63:6B:FC:E2:E2:10:0B:B2:EB:C4:C4:26:F2:BB:8A:80:5B:28:34","sha256":"EC:48:E4:DD:7B:D3:21:56:45:45:22:BE:9A:93:7D:44:50:D9:8B:26:86:28:81:C6:90:9D:CF:75:E4:E4:61:38"}}},"request":{"raw":"GET /assets/fonts/icomoon/fonts//icomoon.woff?az67px HTTP/1.1\r\nHost: riftswaps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riftswaps.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:47:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 10 Nov 2025 19:56:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wr7a9qHRQNNOrL3sD3UkQGgdqtPkbtZP8rWnuSnPFSK%2BFB5JXc%2FPCcQM%2Fu1%2BC7ZC94a9VwNrDRLwpG3%2BCrYkaQue9RlR3rZeO3gUMu8%3D\"}]}\r\ncf-ray: 9cdc5516abec4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1203)","md5":"1be31657c07991b80ba861fa4b15781a","sha1":"dba651c5d2fe85db7697bc4d78a75558db9437dc","sha256":"420d9ff0521991786d627058fe2b9873567d58f6af8a6cc9179932146c9d7f2a","sha512":"199b75ea04e9492012223a2b35b5533a51112c9dfc05783ca6ce6d6a4c62d2f644896df537444474212b68cdeeaf1a7dc1d64fb3bbb376ed346d379e079b6882","ssdeep":"192:POlR40phHipgwATX/CePNt8hHoSPU5Nn1chpx7K9TThoNLyBx1VoMppiDV7DBnQk:POlR4I4OR51cUTTQYn5iDbCBM","tlshash":"aee2925141e011b7054681a25aa27b1b6fc7f80bef0708447afd43986fcae86c9b76ec","first_seen":"2026-02-13T05:55:37.074561Z","last_seen":"2026-02-14T11:48:07.393744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"riftswaps.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}