{"report_id":"a264e09b-dfbb-478e-886f-fab5ddd6e841","version":6,"status":"done","tags":[],"date":"2026-03-31T16:08:34Z","url":{"schema":"https","addr":"fortnitegalaxyswapper.com/","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":0,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"title":"Fortnite Galaxy Swapper - Free Custom Skins \u0026 Cosmetics","dom":{"size":22535,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8243)","md5":"f81f529567e73141bb9c4a503170049d","sha1":"30697fe7d2a1b9137ea76ba1a57af82d55982a2d","sha256":"1a4e2079bcac3bbe650139932f9aadc031292a5da17bb23fd2a41dd5e846ca79","sha512":"4fe35b93b361ac03c728788dd18d1a3b0b4459e9ea87de867e61fb79590dd704c14b3e8d8b0409286065d968faafff536ae0b64b0617718ddc4ebd301e2a00a8","ssdeep":"192:BYiyaDebaACryamQUjRmxyBg5erOol0N6w7JVMNXmKsrNtsRJG9NK:BYiyaODQUMxyBKerOpN6SImKmsRQ9NK","tlshash":"41a22f354be3143b08f784d4f560478f68e2c6cbce6a096232fc0a95afd5c65e99718e","dom_hash":"domhash5486f6d2cc22bdbac2c851c6577dbf72","first_seen":"2026-03-31T16:08:41.112648Z","last_seen":"2026-03-31T16:08:41.112648Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":0,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T16:08:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fortnitegalaxyswapper.com","ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-14","domain_rank":0,"first_seen":"2026-03-31T16:08:01.121056Z","last_seen":"2026-03-31T16:08:01.121056Z","alert_count":36,"request_count":12,"received_data":1706372,"sent_data":5531,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-29T22:35:00.993215Z","alert_count":0,"request_count":2,"received_data":174586,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":1,"received_data":465413,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/script.js","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"80bbd4ad0c784dc1505d550d200bf434","sha1":"348cba7678a0c889f1e4d1edd324794d84b4fbda","sha256":"410a470ce80608d874a19e6ac57e40dc1f3b88bcfb87b14c98a0196303b62414","sha512":"7a227f4f30c9fdc9d7e2c37ad85a10bff295bfdc4453538e97ef54696676cce66c349d8f0007b66101a888ba21f6dcb54e4c87ff721b78d42e770ce94d17ded7","ssdeep":"","tlshash":"82410d545121103ac5fbb336ce639388fb692063b14386023d6d888a6fb59b71571fe9","size":2056,"data":"","first_seen":"2026-03-31T16:08:08.697013Z","last_seen":"2026-03-31T16:08:41.182399Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-13T13:44:34.259191Z","times_seen":26976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-TC13T2XJGD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"58608341e32898b619c004293610b115","sha1":"a737c7dad503d23c6866e10fbbfa7ec173be90d3","sha256":"65bbff2213832d99ca3ca8d2fbdcb2b7df0a38965533e35ad664afbcec8c048b","sha512":"39aee4d502ae881b7c3b29de0da14c554cfd0d91f6e3254dd0e547c39365bbef8a1e8d93f2ba3cf65e5a6ea96ac6e0605d5ba0f1761ae1f13e817efc285ef2af","ssdeep":"6144:rLL3joXfV8266D2hfx/sfr8QVe6lasrfUGzT64PzinlbbmMsPg:YV8266D2DsD86VBqbkg","tlshash":"0ba41aceb3d674225396f478503f018ba57b29a2b44cc89af189cce42e7465a4277f7c","size":464809,"data":"","first_seen":"2026-03-31T16:08:08.719704Z","last_seen":"2026-03-31T16:08:41.170336Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/link.js","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"67b4705efc8e45b6f392ca9d8a000878","sha1":"e6200121389290c6b3d3a92148d14043feaf7440","sha256":"d6f5146472d0fc2acc7b56d1317e758cd7bcb2c1dc0aa7b0b5f8d18a17c0f4f5","sha512":"8efdc8134e7dc76c008ce83a7911843c1d9a5e9938c89a2c261dfe4fce77b7715d68c7bf8cc27e5573573a7c38c1c88075137711d32492d2ee977b449c2d9d5f","ssdeep":"","tlshash":"c5d0223e2bb68670d0370197e0b7d325f871003b6809c486c06e480cfc71e9368e7989","size":214,"data":"","first_seen":"2026-03-31T16:08:08.730632Z","last_seen":"2026-03-31T16:08:41.127496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"32aaa2aa0cc05545fe0b3ae2f776e847","sha1":"5f3960d7d78e7cb90f4ac02b67a715a75ec61958","sha256":"43303d0a13a5924ff1cc7f536122a078a58062b8b8d16f354c42f37a98fdf5f2","sha512":"e3316f3ac6b190fdc58ed6f6099ace4bc5b9a92edac8c4ba2143210906591b0c3afc2fee2978cdeaff0835a25e89fdcedf310e588ae689280cb5217d8db59fd5","ssdeep":"","tlshash":"c9c08ca82b9b8c6110b73a414b3f6204700aa3172090ce313d4eb6848f34e2bd668808","size":190,"data":"","first_seen":"2026-03-31T16:08:08.750045Z","last_seen":"2026-03-31T16:08:41.196478Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/swiper.js","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd45efc49558e4bad0ee7b6edfe3420","sha1":"c1ac1c553c570a2965d2185b8599a71951fcc065","sha256":"f1dadf5af79e479157300d1db7a5091d1de5ff67dfefc47d394cfbb27f208386","sha512":"4906aa6e13276f0bf3acd790e42f39adcc23d98fd0955b65c45bdd7b6bb7b371c02a2c0c13afc864aeaa40702204af40a0653f9499a2761bc8a09bb5f90c1dcb","ssdeep":"","tlshash":"2be02a430120243a0b33ea3a622d6300f530036b51c6982338bc4c80ef7a22412eaeee","size":397,"data":"","first_seen":"2026-02-12T02:56:38.944674Z","last_seen":"2026-03-31T16:08:41.154924Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/css/grid.css","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /css/grid.css HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697a3437-2508\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9480,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93717b98488d1ee9d1aafff192d013c7","sha1":"b45939ba0e8e4c3cad7940107f18f0b5fd2d7a9b","sha256":"9c4808d4f12bfa3d3845e6c94d26051f07b8ed9773cc677719240a1bf41b9a94","sha512":"ad6b2c2e09161bcd41c724be7b744958c5fc801b1f7cd79b429283c68aa87254d88d83ca65da38f6cd3f3aa9bb7d0d5cc986f7e4a9f66ba66e0647db6018f9c4","ssdeep":"96:14RZwqZGichTgInIZICIcIkInIZIIItIjIyI8L:14RZwqZGichTeL","tlshash":"9d1283418d201e1d50f5e7bca3f1081dfaaa64f7e7bad8c57295a483ef7ca440869cc9","first_seen":"2025-09-13T12:27:53.568579Z","last_seen":"2026-03-31T16:08:41.120249Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/img/skin_blaze.webp","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /img/skin_blaze.webp HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 839626\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"697a3437-ccfca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":839626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4466554ce2315d1ec4cebf9316b0db08","sha1":"b8df45951fe31db858625d646ff749ee756b40ce","sha256":"232f6ffbeb4d275cee31ea5a144484acc577a6a4df3565f4471d84850393fa1b","sha512":"55d9b195068cc42c53e8bad01ce56b723fa2eedc34fedeae1a3f9dafc15c9005dd6680018d0f5c0ea2082496eb8084ba970b39aca5e3a578dc8981c5291b65bd","ssdeep":"24576:xlomSaw2uvz103rD1JVlbfMZB2XNRLXwnYnBgi+N5:sb7z10fNlbEZ2NsH","tlshash":"900533b796071d83c4ba543193a435619038db8e73b31a4b9bd3959c8ccda23afed931","first_seen":"2026-03-31T16:08:08.747295Z","last_seen":"2026-03-31T16:08:41.123455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/link.js","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /link.js HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 214\r\nlast-modified: Thu, 19 Feb 2026 23:42:17 GMT\r\netag: \"69979fd9-d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"67b4705efc8e45b6f392ca9d8a000878","sha1":"e6200121389290c6b3d3a92148d14043feaf7440","sha256":"d6f5146472d0fc2acc7b56d1317e758cd7bcb2c1dc0aa7b0b5f8d18a17c0f4f5","sha512":"8efdc8134e7dc76c008ce83a7911843c1d9a5e9938c89a2c261dfe4fce77b7715d68c7bf8cc27e5573573a7c38c1c88075137711d32492d2ee977b449c2d9d5f","ssdeep":"","tlshash":"c5d0223e2bb68670d0370197e0b7d325f871003b6809c486c06e480cfc71e9368e7989","first_seen":"2026-03-31T16:08:08.730632Z","last_seen":"2026-03-31T16:08:41.127496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/img/logo.webp","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 79802\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"697a3437-137ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79802,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 383 x 191, 8-bit/color RGBA, non-interlaced","md5":"34d2c6bc64608975634558a0a7b243b3","sha1":"611751a37bdd0e525cb27fc17b8bdd6a88a173c0","sha256":"2d9a66193e05e92fe6226ec6d89c565162913eb235eedaf00968404fa7a4da08","sha512":"f81df1580c19c740c8ecd63abd4f697a9c2615a1a4ab1eeb5a18c8b169b3bf021a9c93b0d11b7252b8cdedf8564a5763386a17ccd0294b6b64f34b7206db9156","ssdeep":"1536:1l8chfgdhYhWMnOcySpXUjF/GNs2iCrzrAuUfB9k:n8ch4dhYhWMOcySpE0NTPAuUfBm","tlshash":"ab7302ab0751f5878b493a04b823a02a5fb696cc35e05bd4fc27eb551b3f7f34864862","first_seen":"2026-03-31T16:08:08.707563Z","last_seen":"2026-03-31T16:08:41.13154Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/swiper.js","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /swiper.js HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 397\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"697a3437-18d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"6fd45efc49558e4bad0ee7b6edfe3420","sha1":"c1ac1c553c570a2965d2185b8599a71951fcc065","sha256":"f1dadf5af79e479157300d1db7a5091d1de5ff67dfefc47d394cfbb27f208386","sha512":"4906aa6e13276f0bf3acd790e42f39adcc23d98fd0955b65c45bdd7b6bb7b371c02a2c0c13afc864aeaa40702204af40a0653f9499a2761bc8a09bb5f90c1dcb","ssdeep":"","tlshash":"2be02a430120243a0b33ea3a622d6300f530036b51c6982338bc4c80ef7a22412eaeee","first_seen":"2026-02-12T02:56:38.944674Z","last_seen":"2026-03-31T16:08:41.154924Z","times_seen":3,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/img/skin4.webp","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /img/skin4.webp HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 351166\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"697a3437-55bbe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":351166,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"8d1e9b0c78fc377f6e02f5f8a1b94093","sha1":"6d9cf7329fcce730b197f760fea7e7791c6bbb9f","sha256":"73dfe71564f44f4e276fc85b902f13ec0cb38802c7a21f3877d3e05e5490da8c","sha512":"140179bc1cce74a8a68c3fe8b28afa8a71be208f718eb2465684462088df7fb621a793831475932774bebf1829ca5860e1841446f32bb72f61c859a0a19f2b9c","ssdeep":"6144:Mf0IgmlhowIZq/8wfVDBsQxWehmOvddCDT0mdnA6ymoGuEM217v3euiipgwVf:Mf0Ibl+tOBlhQxOUWhmoGS29vhLh","tlshash":"54741346d4cde637c1bba4603785f4f1e6e224c28ba24f438366b1c289d7f786d909c9","first_seen":"2026-03-31T16:08:08.740033Z","last_seen":"2026-03-31T16:08:41.158453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/img/icon.webp","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /img/icon.webp HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 237458\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"697a3437-39f92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"060a9b3d25613d1276c876868f20ad18","sha1":"74f47137e4b94d4325321ef545689bdc30489869","sha256":"77b6079a747b804d2cc5e180ca77322a81800f9e66a4ac80ef858a23876b0feb","sha512":"72a2129b1c31bba02f597c1724c424bba3a60730c99396a81424e0592ee1676b6097153da7e0cecfc38be20b12e11eacf42d8f3a11abc1ad19303dedab1f6f21","ssdeep":"3072:M+Q3ph7nt6BO7g30ATGEzHRwnQQYpp+2Wtq1DllcNAhscsvQR19EBVU0PVEQTWgX:43pxnn760fEzHRwQfWIDmGxEDmk+U","tlshash":"5c341267ac082998cf435e70b9dd09388db556a0afe085efa4f3c0914795f95bccb02e","first_seen":"2026-03-31T16:08:08.744264Z","last_seen":"2026-03-31T16:08:41.163274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\nage: 32723\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-08-13T13:44:34.245617Z","times_seen":26012,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":33,"dns":0,"connect":13,"send":0,"wait":14,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-TC13T2XJGD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:22 GMT","end":"Mon, 01 Jun 2026 08:36:21 GMT"},"fingerprint":{"sha1":"41:BA:93:ED:C4:9D:A5:E1:77:B1:34:E0:50:58:DC:74:05:25:A7:9E","sha256":"97:3D:61:D2:63:EE:A7:B7:74:9F:26:53:8E:77:7A:42:66:0E:E6:AC:F3:26:C2:88:B6:E7:04:58:8D:D0:10:80"}}},"request":{"raw":"GET /gtag/js?id=G-TC13T2XJGD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\nexpires: Tue, 31 Mar 2026 16:08:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154448\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464809,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"58608341e32898b619c004293610b115","sha1":"a737c7dad503d23c6866e10fbbfa7ec173be90d3","sha256":"65bbff2213832d99ca3ca8d2fbdcb2b7df0a38965533e35ad664afbcec8c048b","sha512":"39aee4d502ae881b7c3b29de0da14c554cfd0d91f6e3254dd0e547c39365bbef8a1e8d93f2ba3cf65e5a6ea96ac6e0605d5ba0f1761ae1f13e817efc285ef2af","ssdeep":"6144:rLL3joXfV8266D2hfx/sfr8QVe6lasrfUGzT64PzinlbbmMsPg:YV8266D2DsD86VBqbkg","tlshash":"0ba41aceb3d674225396f478503f018ba57b29a2b44cc89af189cce42e7465a4277f7c","first_seen":"2026-03-31T16:08:08.719704Z","last_seen":"2026-03-31T16:08:41.170336Z","times_seen":2,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":165,"dns":0,"connect":15,"send":0,"wait":51,"receive":57,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\nage: 4092\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-13T13:44:34.259191Z","times_seen":26976,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":52,"dns":1,"connect":26,"send":0,"wait":14,"receive":17,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/img/skin_doctor_doom.webp","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /img/skin_doctor_doom.webp HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80328\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"697a3437-139c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e408c3fbe00d224627e01257c8d3d41","sha1":"f1cb10c9a976d37c14922eb1cc479227f87a9259","sha256":"32a32ebfdc3185de1fc3b190e9064a469729bb3466986ffef7d675660305a9ff","sha512":"1ee8b8ab622ca1bb6571304180fe47f551aa7a4c4ec62d5939aba04ba1d73b3b41bb5a5dca1b385fb6b055396ccd4bc00b817da5d271f17d4fb942b62a624a01","ssdeep":"1536:cu3V4/mFrguOokwzGnZA8DgxlimHQOXaF2YY1rONVDjQv6vSWZEzQms59e4WBUHp:nG/argkw6RimHQOW9SqTE6NEz1sjGP9e","tlshash":"817312cada629654ddb00f7780921b86cadbf15b8074d3a729de0474f762843f8317ae","first_seen":"2026-03-31T16:08:08.700597Z","last_seen":"2026-03-31T16:08:41.176829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/script.js","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697a3437-808\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2056,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"80bbd4ad0c784dc1505d550d200bf434","sha1":"348cba7678a0c889f1e4d1edd324794d84b4fbda","sha256":"410a470ce80608d874a19e6ac57e40dc1f3b88bcfb87b14c98a0196303b62414","sha512":"7a227f4f30c9fdc9d7e2c37ad85a10bff295bfdc4453538e97ef54696676cce66c349d8f0007b66101a888ba21f6dcb54e4c87ff721b78d42e770ce94d17ded7","ssdeep":"","tlshash":"82410d545121103ac5fbb336ce639388fb692063b14386023d6d888a6fb59b71571fe9","first_seen":"2026-03-31T16:08:08.697013Z","last_seen":"2026-03-31T16:08:41.182399Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T16:08:12.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 3555\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"3b3c-64974ef3c3bc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":15164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"32199305f437ff0fff806a867e384e00","sha1":"5581376a98dd72884ae08f34e903d5fcb1881de3","sha256":"259cfcb4ed4356bfb10d564db5b0f7c653d6a253c006101eed3a1d31a41737b1","sha512":"17f9130b82861b4b020b8ce6a8f06df70a3de8d54924edf0d9e954a831165f396c4e1afec3fd604339f1fa778c7dca5adb71df4348be3de413c11d95508ad435","ssdeep":"192:qi4dUh0AODs6h58hxqLF8ywnUmwPiRSd6msIF8o:qi4dUSExSyUbiiV8o","tlshash":"d4624f3219c054670af7849819a1635efd88c0e7c74586283afc6b8b0ffbd57c9a368d","first_seen":"2026-03-31T16:08:08.704333Z","last_seen":"2026-03-31T16:08:41.186462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":58,"dns":1,"connect":22,"send":0,"wait":50,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/css/style.min.css","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /css/style.min.css HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697a3437-3664\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13924,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13924), with no line terminators","md5":"b68061e53b93ddd5060055cf217a0b1e","sha1":"e3b3d4d3d82d7a12eada542e2c7acf20585bab71","sha256":"e81921d6e0b993be9d67b2aaf377eb4f650008d8c3e715c820326baddce34908","sha512":"01389acd627b71fcb5cbb16857cc11f79128bbc95f8e09f04be528bfb8c3ff07b46110f1610b0b9227004841dd4cfcc1332b77b9bf915c2319488e31a7495b22","ssdeep":"192:xyhvQSEgrvcwxM8AVeVaMcLjW925P+xF2JvOd2R10EoEU7nwVJFXi3EiAEiVBcVU:ENPhGxZO9kXpz","tlshash":"5452453797002c29f01be1aa79c2d7dd716b8413e5236a7dad966139cbd31b30733a86","first_seen":"2026-03-31T16:08:08.726584Z","last_seen":"2026-03-31T16:08:41.190286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnitegalaxyswapper.com/css/SFUIDisplay-Bold.woff","fqdn":"fortnitegalaxyswapper.com","domain":"fortnitegalaxyswapper.com","tld":"com"},"ip":{"addr":"5.187.4.134","port":443,"asn":44051,"as":"Fornex Hosting S.L.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortnitegalaxyswapper.com/","date":"2026-03-31T16:08:12.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnitegalaxyswapper.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:58:32 GMT","end":"Sun, 28 Jun 2026 05:58:31 GMT"},"fingerprint":{"sha1":"43:AB:84:2D:91:EB:3D:D4:A0:4C:A8:31:04:EB:EF:26:0A:6B:24:1E","sha256":"E1:7C:C1:DA:63:49:A3:A2:2D:82:72:DA:75:B1:4E:5D:5C:76:28:2B:79:29:42:3A:A1:2F:2C:14:85:95:0D:EB"}}},"request":{"raw":"GET /css/SFUIDisplay-Bold.woff HTTP/1.1\r\nHost: fortnitegalaxyswapper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnitegalaxyswapper.com/css/style.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 31 Mar 2026 16:08:12 GMT\r\ncontent-type: font/woff\r\ncontent-length: 73036\r\nlast-modified: Wed, 28 Jan 2026 16:07:19 GMT\r\netag: \"697a3437-11d4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73036,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 73036, version 11.0","md5":"383901d6c0f200a52b926943ac7510f2","sha1":"a83f69ba5d2d712fcde05e4c2b736b173997e9b4","sha256":"3864b55e6b37b61f04b71d93e48563bfcb84059c5065e2a6d0339911ea384c56","sha512":"df5de4926c08ec18bf8113694e62445e62b2013664eb1b02c89a8c50e81d0ffd2e50f7c86e3f2028dba1db0fd5d4736a14abe53246053a702e40ddaec2c418af","ssdeep":"1536:klM5a5t9i50pw8oJSD8rLmaU0L5yeGA4ETvFsJlAuN8D47oZrKHgBS+Te:TY5t9i5gAEQmVIPTtsJPkZrzA+Te","tlshash":"766302a33f103f398a9b457631fb7b8721ce5651d703a488893ab36e9f85d7a8447807","first_seen":"2025-09-03T08:53:57.340103Z","last_seen":"2026-06-22T03:51:36.88366Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"fortnitegalaxyswapper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}