{"report_id":"b37bd54b-1107-4bdc-97a0-cd67b2ee9f3f","version":6,"status":"done","tags":[],"date":"2026-02-14T06:50:39Z","url":{"schema":"https","addr":"malgoswap.com/","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"malgoswap.com/","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"title":"Malgo Exchange - Anonymous Cryptocurrency Exchange | Trade BTC, ETH, XMR \u0026 More","dom":{"size":55385,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47321)","md5":"663ce43dc54523ff543062d066045bd5","sha1":"fb55ccf928e7dd7834bfeedc11be854d4f75b9fc","sha256":"b9f4df76574a002d3caa1b57f0e9455998e0bdb4f0678f267f7f2df9d50af400","sha512":"9cad9236f77dca5ca51f4bf7b9f76a5a6d47d545f8c1ef31f51db5ccd140452836b494b794e60ce0563802fcdf2d33042344ccda730c294a230ef8931cecbf34","ssdeep":"768:tbCHpqZX33WqE7lxSazKGa10uBYy0O9w7ETWytX33WqEFIy4WB2AZyxV0a:tUkGD7Dy0mLhGDmy4Wu","tlshash":"7b43f6ba535145bf865383d8f2b1b77c705a928add1b8c4cf3bc069537c6c4d8c22a96","dom_hash":"domhash9db1f755bed4d21a48896c43492015b1","first_seen":"2026-02-14T06:50:44.779348Z","last_seen":"2026-02-14T06:50:44.779348Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"malgoswap.com/","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T06:50:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"malgoswap.com","ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":26,"request_count":26,"received_data":1131006,"sent_data":11451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-02-11T14:34:15.523478Z","alert_count":0,"request_count":10,"received_data":30456,"sent_data":4942,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":3,"received_data":123717,"sent_data":1644,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":18934,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"malgoswap.com/assets/loader-circle-CMcDfjan.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"71afef50f4275c150288462b2990f2b0","sha1":"6d0728616ca4bc7411a1e81109839a771db39453","sha256":"97cd475a5dc969055aef17f4526be8512be7e7698a550add5427f3d40d232298","sha512":"14cbf50e000c62e816b6052f7c99ed763c5abc3f824757cad795ea2518dfa32a62ce733196f7f02935d09f36c64356b5c6165d6d01a7e315d4523ca1e5f1e118","ssdeep":"","tlshash":"3ae07d2b1e6413b301938c781b0ae6c96b051599435e33a07011832c89310efc2dfdc0","size":312,"data":"","first_seen":"2026-01-27T11:14:45.072368Z","last_seen":"2026-02-14T06:50:44.785875Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/reserves-gsquIYIW.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bd363471e30e76e43deffd896616cd84","sha1":"12b147dcbea674960034e7d91b206bb6c6b1bb95","sha256":"93a1a9e4b5dcb09680f68a091ee7f267d5e173ea39591d570332b8d9393447a5","sha512":"31ae04a2201376ec0c9dd089dd40758c342578d413a94a31a31940b38cddcb68ea289e30bf2c479315358a6b8493e3c591e7a0359287c9cf1b4b5191982e1f92","ssdeep":"","tlshash":"e341f155aa61f26f40b3bdccdd181410822d646c356e9497bf7828c2f940e02667ebb9","size":2188,"data":"","first_seen":"2026-01-27T11:14:45.08893Z","last_seen":"2026-02-14T06:50:44.78963Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/index-C05VmP94.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b21e98840d55420fa92f568acb30bd","sha1":"8ea0ff34e1ecce63cdd1c3e994190daab3c29488","sha256":"86311044083cad654462be70d4538e791f3eea97105b8838cf6a0f72056f0e93","sha512":"d44226c0eeedf5857a146edba403ebc122856fa6759a40d19667fa0cefe844beef0f5831768fbe1acc333b189e1d0073bdcf44e16d2463e098e1800224bf06ec","ssdeep":"1536:jL466/qw4yreDUuXaEygYIrdBkNdpvFkgWIG4v1Kx8zuCMzvb76PTfB+eYXBBdK+:Bb5QiTkYWyZEJG+I","tlshash":"b234d8eeb7d4b3f4e447f7f0d82650a5761b28fabb67cf64c3a99d44a64105c8889c80","size":242432,"data":"","first_seen":"2026-01-27T11:14:45.068524Z","last_seen":"2026-02-14T06:50:44.798608Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/addressValidation-DVU3KpOv.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c5971ad74fbe5506969757da5c4e7648","sha1":"79c3bc11e425ad7e51ace4ffa710fd7bf7b71f6b","sha256":"358b1f2de3558530db78a5b4568e30debd27153bd8171308615ac1fa2c05ab19","sha512":"bb493486e9c2352736bd18d5414bf429a69bedce0106f5b60e4173e4ccbebf0b2d106867aec309ad2a80df66ef3928cd448e551734421d5e5ab17b5d270e7294","ssdeep":"","tlshash":"a55121c4f7ebf0a513f118de2cc695175efcf7a4702d2428b00ac4526974499abbbac5","size":2682,"data":"","first_seen":"2026-01-27T11:14:45.069828Z","last_seen":"2026-02-14T06:50:44.797561Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/LoadingOverlay-uM1vlHv6.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3d732e1058bb35567033c0216cb0b724","sha1":"cb8b5de0774613480eba662716e34fcb86e33324","sha256":"b18fd582ae88cdd2c9f1f9ea38fca3a04630c73aeea52d121bc8d7381ceada5e","sha512":"d0ea202f44adbf3978356727e1a23201e37ed288510195262835dda7fdb569bbb0d025efcb0327b9f381956386b19812ac3ed05cca9a9ad83e353acdcf1a59a5","ssdeep":"","tlshash":"b131025e91076bed86970ce4f85f900a613f8cc4ef3f4cd4e0b8600a27900ad691b7d5","size":1773,"data":"","first_seen":"2026-01-27T11:14:45.086573Z","last_seen":"2026-02-14T06:50:44.782993Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/arrow-right-B-_6qrd0.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7bf2684d95c9540f495b149307534bb4","sha1":"3118ecb2118acf1a6b8f8f897dc288d0f51b6821","sha256":"7bbd7b891ee84d7cddd5a84d0ffbbdee2609ef4bbc78cffae220b4d973e09b2d","sha512":"044b407821864a68f8d2507299162beb8b1d8d592a3e78771fcde14f78106257c81bfe52b02be49278a02dc5d6a843ce53e2e95ccbb40e502f3498d314667f2a","ssdeep":"","tlshash":"51e07d5f2ec063b3029184ad2f4be5ca471c15ec836f7650741683ad86300df86dded0","size":338,"data":"","first_seen":"2026-01-27T11:14:45.076795Z","last_seen":"2026-02-14T06:50:44.787767Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/index-DSy7ZsHL.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a137a79c3591dbf632cdf414901b8a","sha1":"babc3571484aef93c60f8b1db8e8a1c69271d690","sha256":"6caeaa4234b194ff718afd9a8ba792acdb43ed455c51c2d4cd4ebc140d74dbb1","sha512":"8c8e1788618b933d4a8cdb7f66967e5cb81d47248ee083661055676c4278fd63a1ef691321754eb881aeb2a94443bcd5fbfeb9397bab8d6789488962469455cf","ssdeep":"6144:zD0GF0OTY49XO3X+R50J8o+yNFwOvDzFpKOZ2b8lOp9v6JrDJ:ko0I/9X1R50XNNW4aOQolD","tlshash":"99a44bd872a5b2655be345e4407f0203723a2d66340c84a4f23dedea3a7444a65bbffd","size":484932,"data":"","first_seen":"2026-01-27T11:14:45.09169Z","last_seen":"2026-02-14T06:50:44.815464Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/currencies-CuzGmkPb.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0a8544f152db3c08dfb03e6cdf734781","sha1":"1468ebe8977a0ca4f448259b242839a04f7a12f4","sha256":"4a39631615777b2222de2bb319cc240b086ff9e7ece8af21c56a5160bc29a18c","sha512":"e713196549037210d0c8d45a16bd8b234b45af324b55ffaaf89ce9f25b4eebd3a17b8ec72496ce7df871d75b0e51f992fb3f9b220828f26bd446869c8f142d2d","ssdeep":"","tlshash":"8f51cfef95a38c540f21e4eba23070dde079659dfca2e4dabbd4400852f538664a0fb3","size":2809,"data":"","first_seen":"2025-12-29T12:30:45.838649Z","last_seen":"2026-03-20T19:18:18.608824Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/chevron-down-BoN6nKvH.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ae7415231580c1607b9b2764bb3a447a","sha1":"67ba100cea8bb636d5b626c247a89940ae3f9ec8","sha256":"2c157c10b66abe197dcf56a1b82385261fcbbbf3c7b419331d1b2e26cdc9eadb","sha512":"136de65bbdf3e134271d48787201ebe402137a0f0c59332fa93ce1a7273d508a37a4522c73fdfa4e48c8d24a7d3ae5ad1fbaed027d6f800f459c90bc9fb30d18","ssdeep":"","tlshash":"4ce0cd2f26602273016548683b4fe6ced71915dc975e7354a412832d85305df42cddd0","size":301,"data":"","first_seen":"2026-01-27T11:14:45.073545Z","last_seen":"2026-02-14T06:50:44.804074Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/arrow-down-up-k9Xe6Z3z.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5c521a92d1f6a70ffc3d81ecff421e2d","sha1":"ede9524225618ca8453e80851dd911f7fd44d4a5","sha256":"b0ef6c5fceab1d259660c5ee00c2af4f37cd6f0fdb2c01d7a142ee82c6a425d8","sha512":"82cbf87dab2cee4dc3aae9f152c289e16fd7ebbf96d43e82d7ccb07bb941779f032f01c1c3fda5001404cd6b4de83c3c9f81ca5453eb672d400d77acdff62d88","ssdeep":"","tlshash":"07e02b1b1a80637305a1d5ac1b8bf9856e9916fd939f7a51b8134379d73045f49ccfc0","size":418,"data":"","first_seen":"2026-01-27T11:14:45.067395Z","last_seen":"2026-02-14T06:50:44.799613Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"malgoswap.com/assets/LoadingOverlay-uM1vlHv6.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/LoadingOverlay-uM1vlHv6.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLXWa0MdUCkiF6MU%2FVTPKiGBpPg1HY%2FDm4FY19DnRUwpFn9BQVfKfmXwvGf1UZ%2BTMFHiY8WuBVHxavRWHA6VM%2B6Nq4c8FbKSjgbKXEE%3D\"}]}\r\ncf-ray: 9cdaa16a684a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1772)","md5":"3d732e1058bb35567033c0216cb0b724","sha1":"cb8b5de0774613480eba662716e34fcb86e33324","sha256":"b18fd582ae88cdd2c9f1f9ea38fca3a04630c73aeea52d121bc8d7381ceada5e","sha512":"d0ea202f44adbf3978356727e1a23201e37ed288510195262835dda7fdb569bbb0d025efcb0327b9f381956386b19812ac3ed05cca9a9ad83e353acdcf1a59a5","ssdeep":"","tlshash":"b131025e91076bed86970ce4f85f900a613f8cc4ef3f4cd4e0b8600a27900ad691b7d5","first_seen":"2026-01-27T11:14:45.086573Z","last_seen":"2026-02-14T06:50:44.782993Z","times_seen":8,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/loader-circle-CMcDfjan.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/loader-circle-CMcDfjan.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCLxD3tE2mOhzu6cFEdT3dAsiRTT2OelLqTi9zCGflFD7DqKsPmLOH2xOgq4vEgeHjH24aB3XOFGQv6f6qmzW6Gb0%2BgXtLh0EPHA%2BjM%3D\"}]}\r\ncf-ray: 9cdaa16a684b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"71afef50f4275c150288462b2990f2b0","sha1":"6d0728616ca4bc7411a1e81109839a771db39453","sha256":"97cd475a5dc969055aef17f4526be8512be7e7698a550add5427f3d40d232298","sha512":"14cbf50e000c62e816b6052f7c99ed763c5abc3f824757cad795ea2518dfa32a62ce733196f7f02935d09f36c64356b5c6165d6d01a7e315d4523ca1e5f1e118","ssdeep":"","tlshash":"3ae07d2b1e6413b301938c781b0ae6c96b051599435e33a07011832c89310efc2dfdc0","first_seen":"2026-01-27T11:14:45.072368Z","last_seen":"2026-02-14T06:50:44.785875Z","times_seen":8,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/arrow-right-B-_6qrd0.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/arrow-right-B-_6qrd0.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AazcSJvDxXiWfLUwiXpqA%2FtybWuiv%2BiNEe90dIgCXpEIO1PG2jzmvGBYciwRwYk1qH5yHqXKmYhEHteSYdgaod9QvshONL3rbOharA4%3D\"}]}\r\ncf-ray: 9cdaa16a78514c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"7bf2684d95c9540f495b149307534bb4","sha1":"3118ecb2118acf1a6b8f8f897dc288d0f51b6821","sha256":"7bbd7b891ee84d7cddd5a84d0ffbbdee2609ef4bbc78cffae220b4d973e09b2d","sha512":"044b407821864a68f8d2507299162beb8b1d8d592a3e78771fcde14f78106257c81bfe52b02be49278a02dc5d6a843ce53e2e95ccbb40e502f3498d314667f2a","ssdeep":"","tlshash":"51e07d5f2ec063b3029184ad2f4be5ca471c15ec836f7650741683ad86300df86dded0","first_seen":"2026-01-27T11:14:45.076795Z","last_seen":"2026-02-14T06:50:44.787767Z","times_seen":8,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/LoadingOverlay-uM1vlHv6.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/LoadingOverlay-uM1vlHv6.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMDAPfPa3B3xWR4jSMGYgUEFcTQ60ShEUpUk3DhB6udYPamnMtLCvscOAWDsxueuvDA%2FX604i4Uh%2BL3Kje%2BQNh99wKddv96O6tL6xyk%3D\"}]}\r\ncf-ray: 9cdaa16ba88c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1772)","md5":"3d732e1058bb35567033c0216cb0b724","sha1":"cb8b5de0774613480eba662716e34fcb86e33324","sha256":"b18fd582ae88cdd2c9f1f9ea38fca3a04630c73aeea52d121bc8d7381ceada5e","sha512":"d0ea202f44adbf3978356727e1a23201e37ed288510195262835dda7fdb569bbb0d025efcb0327b9f381956386b19812ac3ed05cca9a9ad83e353acdcf1a59a5","ssdeep":"","tlshash":"b131025e91076bed86970ce4f85f900a613f8cc4ef3f4cd4e0b8600a27900ad691b7d5","first_seen":"2026-01-27T11:14:45.086573Z","last_seen":"2026-02-14T06:50:44.782993Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/reserves-gsquIYIW.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/reserves-gsquIYIW.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kb2oPJNJSj2uqfkEKnz8W2cG3g9%2Fv31gO0i2u7s0HkR0Ip2VVXazeFSKhiSa3NGNqB3gBgRyWhfzXNXTJ8UyscFOyBioZyjhxjlZE8Q%3D\"}]}\r\ncf-ray: 9cdaa16bb8914c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2187)","md5":"bd363471e30e76e43deffd896616cd84","sha1":"12b147dcbea674960034e7d91b206bb6c6b1bb95","sha256":"93a1a9e4b5dcb09680f68a091ee7f267d5e173ea39591d570332b8d9393447a5","sha512":"31ae04a2201376ec0c9dd089dd40758c342578d413a94a31a31940b38cddcb68ea289e30bf2c479315358a6b8493e3c591e7a0359287c9cf1b4b5191982e1f92","ssdeep":"","tlshash":"e341f155aa61f26f40b3bdccdd181410822d646c356e9497bf7828c2f940e02667ebb9","first_seen":"2026-01-27T11:14:45.08893Z","last_seen":"2026-02-14T06:50:44.78963Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/ltc.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/ltc.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a3d11a811ab43b8c095cc9dc9ea7c8ddd8027268707afb7cbf159ae535b85689\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 2BFE:DEE6D:B0ABDA:C4DE0B:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.009514,VS0,VE144\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: e0105e53553a09b7a7937421a2a3298c30f4f2b4\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7dcdae7c7e0a356a4e6299279a43ab34","sha1":"9711559742e0af049529468fac61f90621a46c5b","sha256":"556e8951c616fb78cf94b65817c1d69c8cd32440a6ed0cf2bfda0083fcaac300","sha512":"d205ff31c0fa7e1c13bc12868f04a77c1fea4b28d3fa8fbd4b3df6482275dc79a5fd09039d5641e47fdb117229283ef26f0254a5ec6daf8aef69960e9707c6b9","ssdeep":"","tlshash":"bd31cd71929cb40f1c5a537af3a0a0a7032f20b971ae154dfdee9e28a4336d7d483944","first_seen":"2023-07-03T17:26:34Z","last_seen":"2026-06-06T23:49:41.805374Z","times_seen":34,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":54,"dns":1,"connect":33,"send":0,"wait":157,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/prices","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"POST /prices HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://malgoswap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"ids\":[\"BTC\",\"ETH\",\"LTC\",\"XMR\",\"ZEC\",\"SOL\",\"XRP\",\"LINK\",\"TRX\",\"USDT\",\"USDC\",\"DAI\",\"BNB\",\"TON\"]}"}},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: application/json\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AcKeboxOv2LqXAnecaTOdcu8rPKrXnwGJL56jLSRN1I8dyxZ3suJwlRCyXVpQIjXHtDkukVo29oba5JXBd2ocRIMSJ3GhSEZcQc%2FIKM%3D\"}]}\r\ncf-ray: 9cdaa16ca8bb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c5a85f774c04bb7423818e1d0ebd2067","sha1":"b4987257d95c5db39166ee22340105e9e400f04e","sha256":"500a070258663f065e1a6a710b2269d974598ebc6c5f37127ff323c8075785f4","sha512":"ee3493e90a04cafaa18b6929dd771e3857d33cf88c7ac6000362eee08676e32e6a411c655f98b9a824540188fd2e8b3c51b33e1dff385d79b4714f784d7c9441","ssdeep":"","tlshash":"e0e05e4200f292ff1e4465390ca533e4fc034d7e115e4384c84dc9902dec0dfa6410e2","first_seen":"2026-02-14T06:50:44.793478Z","last_seen":"2026-02-14T06:50:44.793478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/reserves-gsquIYIW.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/reserves-gsquIYIW.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJGhhTUkDJU7xwrKn9idZZfUI0ch7AlUbwqaqGaQzg5eNLdvAv5RcylB78EfmFlbgshI7ZHImhVqOe0JFW%2BosjCrctePJNFizIe1iXc%3D\"}]}\r\ncf-ray: 9cdaa16a78544c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2187)","md5":"bd363471e30e76e43deffd896616cd84","sha1":"12b147dcbea674960034e7d91b206bb6c6b1bb95","sha256":"93a1a9e4b5dcb09680f68a091ee7f267d5e173ea39591d570332b8d9393447a5","sha512":"31ae04a2201376ec0c9dd089dd40758c342578d413a94a31a31940b38cddcb68ea289e30bf2c479315358a6b8493e3c591e7a0359287c9cf1b4b5191982e1f92","ssdeep":"","tlshash":"e341f155aa61f26f40b3bdccdd181410822d646c356e9497bf7828c2f940e02667ebb9","first_seen":"2026-01-27T11:14:45.08893Z","last_seen":"2026-02-14T06:50:44.78963Z","times_seen":8,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/eth.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/eth.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"16e4f241c51d443d56479ffb16a90206743a8d9af5964344f0d75a9f7137892b\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: DE42:D898A:AA3948:BE6AD7:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.000221,VS0,VE138\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 7bca83839dbd37b0496f9732057cd5c80bf5fb88\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48b7cdc7d701c6705b49f3ad81a6f52e","sha1":"9334d9e4a9638d560d45aa956429f0582575de5c","sha256":"dc2fb7da464d8fda251761ce4536df3f78754f20ba2261308751fa9eaa2a4382","sha512":"bc24d2a1ddc63a2a407951c6461bf67ddfc6f310e181280a9b951c221bb048173500b42380a2eea27f00eb98c15996fccc456ab8f1664ae88ad4ca40b746e7b1","ssdeep":"","tlshash":"b84100744a6c704f6c5a177de3b890b7222f30f9726d105dbd9e4919a437687dcc3a40","first_seen":"2023-06-08T16:01:30Z","last_seen":"2026-07-08T04:34:21.922398Z","times_seen":53,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":67,"dns":1,"connect":13,"send":0,"wait":151,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/addressValidation-DVU3KpOv.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/addressValidation-DVU3KpOv.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSVUHDklWK%2FuI5LGIIQlfEWcbqIZHuO%2BC5X%2FgbB7cEFNgAY%2B83gePyugwltxp3%2FBZ1FzGa2JiAFP3rAy71klPCK%2Bsms2TfeHTSRcmdU%3D\"}]}\r\ncf-ray: 9cdaa16a68484c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2682,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2472)","md5":"c5971ad74fbe5506969757da5c4e7648","sha1":"79c3bc11e425ad7e51ace4ffa710fd7bf7b71f6b","sha256":"358b1f2de3558530db78a5b4568e30debd27153bd8171308615ac1fa2c05ab19","sha512":"bb493486e9c2352736bd18d5414bf429a69bedce0106f5b60e4173e4ccbebf0b2d106867aec309ad2a80df66ef3928cd448e551734421d5e5ab17b5d270e7294","ssdeep":"","tlshash":"a55121c4f7ebf0a513f118de2cc695175efcf7a4702d2428b00ac4526974499abbbac5","first_seen":"2026-01-27T11:14:45.069828Z","last_seen":"2026-02-14T06:50:44.797561Z","times_seen":8,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/index-C05VmP94.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/index-C05VmP94.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-DSy7ZsHL.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhS2Y3SF7R6Kx36C31inZG08xVvWPYEeFHvh8q8rNBIYY0UlnmXcQIlFhVe%2FM4umKZU5OQRiQ79zi2gUkjJNU7QTtELugyKxlXaE950%3D\"}]}\r\ncf-ray: 9cdaa16a78584c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242432,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64611)","md5":"c8b21e98840d55420fa92f568acb30bd","sha1":"8ea0ff34e1ecce63cdd1c3e994190daab3c29488","sha256":"86311044083cad654462be70d4538e791f3eea97105b8838cf6a0f72056f0e93","sha512":"d44226c0eeedf5857a146edba403ebc122856fa6759a40d19667fa0cefe844beef0f5831768fbe1acc333b189e1d0073bdcf44e16d2463e098e1800224bf06ec","ssdeep":"1536:jL466/qw4yreDUuXaEygYIrdBkNdpvFkgWIG4v1Kx8zuCMzvb76PTfB+eYXBBdK+:Bb5QiTkYWyZEJG+I","tlshash":"b234d8eeb7d4b3f4e447f7f0d82650a5761b28fabb67cf64c3a99d44a64105c8889c80","first_seen":"2026-01-27T11:14:45.068524Z","last_seen":"2026-02-14T06:50:44.798608Z","times_seen":8,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/arrow-down-up-k9Xe6Z3z.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/arrow-down-up-k9Xe6Z3z.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XibHGxMxFWVwUYtRzQg7%2Fd8dzkefgcCPN8K9cq1PBaXt1N7i8cgxDUXlMDqsc%2F0y8EfNFKZGz9nBmrCYL26eJ47GlfxHL67PhihcmnI%3D\"}]}\r\ncf-ray: 9cdaa16bb88e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"5c521a92d1f6a70ffc3d81ecff421e2d","sha1":"ede9524225618ca8453e80851dd911f7fd44d4a5","sha256":"b0ef6c5fceab1d259660c5ee00c2af4f37cd6f0fdb2c01d7a142ee82c6a425d8","sha512":"82cbf87dab2cee4dc3aae9f152c289e16fd7ebbf96d43e82d7ccb07bb941779f032f01c1c3fda5001404cd6b4de83c3c9f81ca5453eb672d400d77acdff62d88","ssdeep":"","tlshash":"07e02b1b1a80637305a1d5ac1b8bf9856e9916fd939f7a51b8134379d73045f49ccfc0","first_seen":"2026-01-27T11:14:45.067395Z","last_seen":"2026-02-14T06:50:44.799613Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xmr.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xmr.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a554b9a9ff39d32e0ed39fd9cffdb91a54b9c31fec981fccfdf3e57d3207b614\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 31B6:80B16:B10D4E:C54027:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.023800,VS0,VE148\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: a6f8f2e4d438cbb32beff17e9c3bf175ebff75f5\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a861250c6e1c88421f21f89765de11e","sha1":"0e040b3df7d3a1de2c4f0768180ab28a879363a0","sha256":"32839784e9dbe34be0cf041f159b739a693ff8cbca1199ac897024aa039be040","sha512":"411b515687275e2510b7b58c026e8ba28253285f282828f1a80598d4ba4579e894b5512fd539f2ed9b23ab298399215c7fc13c7827027a1d7deb51137719a6aa","ssdeep":"","tlshash":"1441dc70926da44f1c5a533ef3a460a7132f20ba31aa560dbdae9e287437693d983940","first_seen":"2025-10-17T18:21:59.263928Z","last_seen":"2026-05-15T05:34:42.550568Z","times_seen":19,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":63,"dns":1,"connect":31,"send":0,"wait":161,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:19.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://malgoswap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 02:54:25 GMT\r\nexpires: Sat, 13 Feb 2027 02:54:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:35 GMT\r\ncontent-type: font/woff2\r\nage: 100554\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-08-04T19:14:04.64141Z","times_seen":2786,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":157,"dns":1,"connect":9,"send":0,"wait":8,"receive":4,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/index-C05VmP94.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/index-C05VmP94.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIOJHhNg%2FOuLrqx6Vhk0%2FtS1N%2BiF%2FCn8NrgOPP1vpHla%2FS6Uc8sg0nrdwhYCMe2Q4jVFeG1SNgeEeu656veRDl%2Bl2LMX7LQpnmNAw0w%3D\"}]}\r\ncf-ray: 9cdaa16a58474c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242432,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64611)","md5":"c8b21e98840d55420fa92f568acb30bd","sha1":"8ea0ff34e1ecce63cdd1c3e994190daab3c29488","sha256":"86311044083cad654462be70d4538e791f3eea97105b8838cf6a0f72056f0e93","sha512":"d44226c0eeedf5857a146edba403ebc122856fa6759a40d19667fa0cefe844beef0f5831768fbe1acc333b189e1d0073bdcf44e16d2463e098e1800224bf06ec","ssdeep":"1536:jL466/qw4yreDUuXaEygYIrdBkNdpvFkgWIG4v1Kx8zuCMzvb76PTfB+eYXBBdK+:Bb5QiTkYWyZEJG+I","tlshash":"b234d8eeb7d4b3f4e447f7f0d82650a5761b28fabb67cf64c3a99d44a64105c8889c80","first_seen":"2026-01-27T11:14:45.068524Z","last_seen":"2026-02-14T06:50:44.798608Z","times_seen":8,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/currencies-CuzGmkPb.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/currencies-CuzGmkPb.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oM2qpNAkTC1%2BlilAqX%2F3RXPb3P52VB%2FysOpTA3Ya2QJ8n1mYNyxi0PwTUrVblIpyB%2By0aFpRbDR8KzfZONaw4np%2BjHZiz9yV89alVfQ%3D\"}]}\r\ncf-ray: 9cdaa16a68494c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2809,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2808)","md5":"0a8544f152db3c08dfb03e6cdf734781","sha1":"1468ebe8977a0ca4f448259b242839a04f7a12f4","sha256":"4a39631615777b2222de2bb319cc240b086ff9e7ece8af21c56a5160bc29a18c","sha512":"e713196549037210d0c8d45a16bd8b234b45af324b55ffaaf89ce9f25b4eebd3a17b8ec72496ce7df871d75b0e51f992fb3f9b220828f26bd446869c8f142d2d","ssdeep":"","tlshash":"8f51cfef95a38c540f21e4eba23070dde079659dfca2e4dabbd4400852f538664a0fb3","first_seen":"2025-12-29T12:30:45.838649Z","last_seen":"2026-03-20T19:18:18.608824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/chevron-down-BoN6nKvH.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/chevron-down-BoN6nKvH.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8la%2BE7gczFx5P7b8i3K9Pso3zNbI0qD1UlovzfrGSJ0TXU2q%2BCLJ5Z33CxYQPHb2NdEFiplp7atcm6J6WUxL84ifOVeWfRJGB9SuCc%3D\"}]}\r\ncf-ray: 9cdaa16bb88d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ae7415231580c1607b9b2764bb3a447a","sha1":"67ba100cea8bb636d5b626c247a89940ae3f9ec8","sha256":"2c157c10b66abe197dcf56a1b82385261fcbbbf3c7b419331d1b2e26cdc9eadb","sha512":"136de65bbdf3e134271d48787201ebe402137a0f0c59332fa93ce1a7273d508a37a4522c73fdfa4e48c8d24a7d3ae5ad1fbaed027d6f800f459c90bc9fb30d18","ssdeep":"","tlshash":"4ce0cd2f26602273016548683b4fe6ced71915dc975e7354a412832d85305df42cddd0","first_seen":"2026-01-27T11:14:45.073545Z","last_seen":"2026-02-14T06:50:44.804074Z","times_seen":8,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/arrow-right-B-_6qrd0.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/arrow-right-B-_6qrd0.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68kFTDtuRyItRJ%2FzTTzgpuHLi94NRBXbegmXwHqMvoLw53qz0NSw6cse7GcIOXVKkxQplTqktI2tv1dNGlCnglgUYWQYoScVOXK8MFk%3D\"}]}\r\ncf-ray: 9cdaa16bb8904c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":338,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"7bf2684d95c9540f495b149307534bb4","sha1":"3118ecb2118acf1a6b8f8f897dc288d0f51b6821","sha256":"7bbd7b891ee84d7cddd5a84d0ffbbdee2609ef4bbc78cffae220b4d973e09b2d","sha512":"044b407821864a68f8d2507299162beb8b1d8d592a3e78771fcde14f78106257c81bfe52b02be49278a02dc5d6a843ce53e2e95ccbb40e502f3498d314667f2a","ssdeep":"","tlshash":"51e07d5f2ec063b3029184ad2f4be5ca471c15ec836f7650741683ad86300df86dded0","first_seen":"2026-01-27T11:14:45.076795Z","last_seen":"2026-02-14T06:50:44.787767Z","times_seen":8,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/reserves","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /reserves HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: application/json\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzUUz9bQYaUHznOzc5gnvqxg%2FW9fimhJnyQqOvzqdhmivHwmbZ5PtMViVylIOU7ZY5gkR%2FRFuCbo0oa5mQwOUEDhT4DK%2FTMjaPpDbCE%3D\"}]}\r\ncf-ray: 9cdaa16c089a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1757,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"727d92dabaa98e9d5877784485dad83a","sha1":"9ae8ebb3448147aa556853cc3b58c4d5c30fca70","sha256":"9f0160522268ab8f27fc0a32969d52bddb08f3596aa90284990172548f067796","sha512":"fad23b210cbb4e4fec59ff95abe61cab2d3ee66ca849c1f12b8463806fded202815b2cf042c07db8e7b2068407b09df5eb04b5786a98509dbf5c3341a25c596d","ssdeep":"","tlshash":"d4319636ff5aaeb0d7332c487e1d32757e39bbb064c28ca0108b9d58032a7715913d56","first_seen":"2026-01-27T11:14:45.07865Z","last_seen":"2026-02-14T06:50:44.805389Z","times_seen":8,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/btc.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/btc.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"cc55b0a4e240e13f99d94804c82c451b8ece0076302eac866291c0a5ad1cf713\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 30F0:68617:AEDC32:C30CC3:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.998464,VS0,VE144\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 30837994250ba4098d6c91dbb2187ba6539ef83b\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 1038\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61439a6caeb6dea3db2446dc5e81b7e7","sha1":"678d72fe9746f2068a29549bd3942b41665e8ab8","sha256":"bd00876ee9415b69b53784f2af106f913f9dd89a067c73faf8c854acb8b02e68","sha512":"d33d531e0a1f70dbf8d2d329156e2063f9f15ed9a7f18582c4246ae1347043867afb8823fd2ada5e2eed39dad91aad501939ab4de5d8156682f250b0b5c182e7","ssdeep":"","tlshash":"764162b54368a40e1c4f473df375a0a7122f70b9b16e5889aeef9d1870336d3e483904","first_seen":"2023-06-08T16:01:30Z","last_seen":"2026-07-08T04:34:21.920763Z","times_seen":40,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":69,"dns":1,"connect":13,"send":0,"wait":158,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/dai.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/dai.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b6b4a5363c65a24062a3f38cb7a02d7d530e272c15ac7dd002e8a0ea4b3dcad9\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 30E4:8B019:AD3133:C16213:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.026765,VS0,VE145\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 856a9c514074b8afe6f4f97d5e6909b0af54a9ec\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2012,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1c6997e290e7d652ae29aa4346eb02a","sha1":"f1f137ac168ef90cfc3442eaf484bba2b82463d3","sha256":"778f90f8379eef873ed433d2e9c038ab5cb14a35c7190b4ee8d96821caab37fd","sha512":"dfcb96b20652814963897a74fb4443c85f0c8cce32de4377bea9fa41ff0ca4aedeba83fb61a419b2b6f9faf9422e527d63a3757dd36c88ad154691aa74032a95","ssdeep":"","tlshash":"ca410e619268a44e6c16073ee3b4a0b3173f30b9715d644dbc9e5e19b433bcbd583944","first_seen":"2023-11-29T10:09:33Z","last_seen":"2026-03-20T19:18:18.614162Z","times_seen":19,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":65,"dns":1,"connect":29,"send":0,"wait":159,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xrp.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/xrp.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"aae8b33c4b584d255d7ab515511480cf919aab577cc373b031dce33f8273f53a\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 59DE:68617:AEDC32:C30CC0:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.998689,VS0,VE148\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4cb82b332c04b01889d1914e17402e3c1f830b99\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":1391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d93d4cc83cf5f88c35f46f9caf5441b4","sha1":"1c74580c8a5a9de88369ed33114ad2787dcb21b4","sha256":"faf4ebbafb2d3bd61b89e0001f5f73447fabb86e71abdd951bf51a8847dc17c4","sha512":"0ffc43b6bcd883322319e41e830b6a6bf355b66c587580803033ca5311346e3ebd0caff3a27870013c993f7d505cbbce3f807977563ae70a9c3fd96339adc92c","ssdeep":"","tlshash":"b0214161475aa80f1c09433ee3f4e0b7822f20fb709e1549fdee5a18b433adba447a44","first_seen":"2023-06-08T16:01:30Z","last_seen":"2026-06-06T23:49:41.843953Z","times_seen":34,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/chevron-down-BoN6nKvH.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/chevron-down-BoN6nKvH.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YV8TP5UHgA7muUnH7NA0Ap46you7Sn3vvSLvrFXY9z5yVH%2BamlMFojnFcAqv7JqwTXyQvhMuCLiCQNT1apkt1C2xmO7c1dcASgwUS2w%3D\"}]}\r\ncf-ray: 9cdaa16a684c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ae7415231580c1607b9b2764bb3a447a","sha1":"67ba100cea8bb636d5b626c247a89940ae3f9ec8","sha256":"2c157c10b66abe197dcf56a1b82385261fcbbbf3c7b419331d1b2e26cdc9eadb","sha512":"136de65bbdf3e134271d48787201ebe402137a0f0c59332fa93ce1a7273d508a37a4522c73fdfa4e48c8d24a7d3ae5ad1fbaed027d6f800f459c90bc9fb30d18","ssdeep":"","tlshash":"4ce0cd2f26602273016548683b4fe6ced71915dc975e7354a412832d85305df42cddd0","first_seen":"2026-01-27T11:14:45.073545Z","last_seen":"2026-02-14T06:50:44.804074Z","times_seen":8,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/api/auth/get-session","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:19.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /api/auth/get-session HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRDXKEs0VjxyJpE1reYFh1zhS%2BAXWlCqkTQ8ge97L7prspaT1fPS0r3VqgEN3MfGw4hGBZQUQmJciyRHasmcI4QqfYnmS00TIGw3LOQ%3D\"}]}\r\ncf-ray: 9cdaa17009674c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-04T19:55:50.732252Z","times_seen":281194,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@100;200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@100;200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 06:50:18 GMT\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18248,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"439fa0c3a18151951b917f4c066d4618","sha1":"6ad61049c20e54cfee23f8ad23b997432c6d49fb","sha256":"c0e8d4ce3bde4bf9a196d76cfde67bf9cec57b502fb9e79463f0471649e165c1","sha512":"6fe5619e74c58c8d79e94dac294052faeef911fb66bd92131aba3b4a7116b2470fdcfe09bb10f1c9f2708b6bcc117a6e2fcec2ec41be116e649163a54c1c03c8","ssdeep":"192:XpUnpWpI3SpVpWNp5UwXI3LOWmKUXwI3kNWFrU+9I3ZAWYEU9+I3qnWfNU0bI3HL:XWnE0SnGAb2vAHSrwjGvYnL","tlshash":"8882baa1042b9440ab472cd273cfbe355e5e61167081d6bacffe1898adabc360374b4d","first_seen":"2025-10-05T18:48:25.541997Z","last_seen":"2026-07-04T11:53:58.283429Z","times_seen":35,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":86,"dns":0,"connect":8,"send":0,"wait":22,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/index-CpzlI02C.css","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/index-CpzlI02C.css HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/css; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FsB9tKOuBo1LQ%2B9Wc1AM55UmzRJfU2faJG5Gja%2Binm83%2BPUozqlysQyq0p%2Bne4msLRcH%2BrBM2w6zTza9DcYhuQJqS7459VimcRTHiU%3D\"}]}\r\ncf-ray: 9cdaa16838264c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97649,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c02b4993d8665b23f8900fbf10f96d50","sha1":"31f55649057fa43aacf02ba2d19815e16950f37b","sha256":"c67c237764a54bf2f8caf00a99d0e95b8cc5295b4e0cd51956b3bac5a8d18ce8","sha512":"7f7b617d7ded149ee9ceb31bcff45b3bce8dfeb929fb1564bfcb988161960fb1a084038277c7557055d409f0b7ee260ce34c3c98262656cdbc637f82b694c46c","ssdeep":"1536:ikSavZUPr+CuSTJ6bNQF5XwFTd0uql83k5atYp:zvZUPr+CuS96g5XwFTdxql8U5r","tlshash":"c9937270f271d97bbd23b9bd63acf44ca219a1c6dd6297ddfa22601153c37f22862604","first_seen":"2026-01-27T11:14:45.065987Z","last_seen":"2026-02-14T06:50:44.814417Z","times_seen":8,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/index-DSy7ZsHL.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/index-DSy7ZsHL.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mt5KRyT1KFwyRFg27OBE6ktiB4ZyVWVqPvi7EWkgH25Pl0oZCF2Ry1GnWw3U34EhNK1DIDedVagQkI%2B9r3pgxuslfhQ5XS17ZAcOxr0%3D\"}]}\r\ncf-ray: 9cdaa16838254c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484932,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39480)","md5":"19a137a79c3591dbf632cdf414901b8a","sha1":"babc3571484aef93c60f8b1db8e8a1c69271d690","sha256":"6caeaa4234b194ff718afd9a8ba792acdb43ed455c51c2d4cd4ebc140d74dbb1","sha512":"8c8e1788618b933d4a8cdb7f66967e5cb81d47248ee083661055676c4278fd63a1ef691321754eb881aeb2a94443bcd5fbfeb9397bab8d6789488962469455cf","ssdeep":"6144:zD0GF0OTY49XO3X+R50J8o+yNFwOvDzFpKOZ2b8lOp9v6JrDJ:ko0I/9X1R50XNNW4aOQolD","tlshash":"99a44bd872a5b2655be345e4407f0203723a2d66340c84a4f23dedea3a7444a65bbffd","first_seen":"2026-01-27T11:14:45.09169Z","last_seen":"2026-02-14T06:50:44.815464Z","times_seen":8,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/addressValidation-DVU3KpOv.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/addressValidation-DVU3KpOv.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2tEH0WWiH%2FiZPYPbiiEyQHfS2FCyHHEvR9XD2fP6tDJET7nXt5DfFPMy5602U91LDvOldZNbkhv0gzCDOKcBSryQqcYpmwD70w2d0w%3D\"}]}\r\ncf-ray: 9cdaa16ba88a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2682,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2472)","md5":"c5971ad74fbe5506969757da5c4e7648","sha1":"79c3bc11e425ad7e51ace4ffa710fd7bf7b71f6b","sha256":"358b1f2de3558530db78a5b4568e30debd27153bd8171308615ac1fa2c05ab19","sha512":"bb493486e9c2352736bd18d5414bf429a69bedce0106f5b60e4173e4ccbebf0b2d106867aec309ad2a80df66ef3928cd448e551734421d5e5ab17b5d270e7294","ssdeep":"","tlshash":"a55121c4f7ebf0a513f118de2cc695175efcf7a4702d2428b00ac4526974499abbbac5","first_seen":"2026-01-27T11:14:45.069828Z","last_seen":"2026-02-14T06:50:44.797561Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/trx.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/trx.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"8ed85f976d749e66107eb2e00cd32915e8be5c36479f4a4f6be7acc78cc2fba2\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 2F3E:13DE:ADC08F:C1B376:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.998725,VS0,VE119\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 5b4df3b06c4527932bfab09251ab4b038c9d2bfa\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2071,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"332e62cbf427ae639e0b6666bc0f51b7","sha1":"ed3be3a2b9dde2faa0ce06cc15efaea58f5e3fe1","sha256":"1869f973d675991ac2c86b71f457ab30ed32da45db83fc29aeb6e9a6581c21aa","sha512":"44ec2b750d957168c60ac5744a8e5ec68fb3be35904e6e05b8ab67effdd2fbc371f907203b98b8dd552e8160d41a80c22479fdf39f2f15dce84b4e7349f2aaf2","ssdeep":"","tlshash":"ba410fb1536ca41ebc4a873ae3e46067032f70b97199649cfcef5a2874336d7d487944","first_seen":"2023-07-03T17:26:34Z","last_seen":"2026-04-28T06:23:18.662327Z","times_seen":31,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdt.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdt.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"0a9c347199113610c00e2a95dda45ee819155480135602055d81843d2b46a044\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: C9E6:8B019:AD3128:C16209:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.999415,VS0,VE123\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: b451b82774a67e138f7540e82897c2dcd15ca50f\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 850\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2a9cab2400408fb50ce5608c591df27","sha1":"503de6bb8d6583813873ede70573f2c551bf7865","sha256":"060006890b2a3171551858f6e04d2454d9965b5f3677ea68d576f4e2c9ace874","sha512":"c9a4b1d36cb3713dde6d9e80a97073772f60e141893667e52047287a4f0c1d04b76226ff360ae72cf4492515b2bf7154759f4e447151251bb0ab4fc66e89ed10","ssdeep":"","tlshash":"4341fdb59368a44f0c56837ef3b950ab132f20b6719d124ebcae9e1db4336c7e493548","first_seen":"2023-05-29T17:41:07Z","last_seen":"2026-06-06T23:49:41.801769Z","times_seen":46,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:19.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://malgoswap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 02:54:25 GMT\r\nexpires: Sat, 13 Feb 2027 02:54:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:35 GMT\r\ncontent-type: font/woff2\r\nage: 100554\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-08-04T19:14:04.64141Z","times_seen":2786,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":131,"dns":4,"connect":7,"send":0,"wait":8,"receive":9,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/arrow-down-up-k9Xe6Z3z.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/arrow-down-up-k9Xe6Z3z.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0nCjcep8Pl1RDF6jAQ2WwXdTkr83RgP18aesjxBfSXkiy%2BlLTwvoM9jbfuZxZ3US5RSi2DRKP%2FnXkLhvnNGJnu9YW%2B3OgfIy9NhTE0%3D\"}]}\r\ncf-ray: 9cdaa16a684f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"5c521a92d1f6a70ffc3d81ecff421e2d","sha1":"ede9524225618ca8453e80851dd911f7fd44d4a5","sha256":"b0ef6c5fceab1d259660c5ee00c2af4f37cd6f0fdb2c01d7a142ee82c6a425d8","sha512":"82cbf87dab2cee4dc3aae9f152c289e16fd7ebbf96d43e82d7ccb07bb941779f032f01c1c3fda5001404cd6b4de83c3c9f81ca5453eb672d400d77acdff62d88","ssdeep":"","tlshash":"07e02b1b1a80637305a1d5ac1b8bf9856e9916fd939f7a51b8134379d73045f49ccfc0","first_seen":"2026-01-27T11:14:45.067395Z","last_seen":"2026-02-14T06:50:44.799613Z","times_seen":8,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/favicon.svg","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVG61jcIYS%2BtpJfnoGXV0Grcv%2Bt4SDPgHPccrWOdYfFXx%2FfCxVMloJWr7gZVQbXDZYYURSxKmsLhRX6QAO05UIu0LhyYmIETvtbaLWQ%3D\"}]}\r\ncf-ray: 9cdaa16b98894c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1134,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0064d0192def776e363a24635f0e33b6","sha1":"8612eb06eef8ba207f016fac865159697ea4d48a","sha256":"92949f2d3e7cd369b2ae9c26f98ba933402a1aec210267185cb975eb399a6544","sha512":"9bf3d0a1b9ea43025c63dddf15139f55142dc447e2fbe2b7a7cd62633d4a9312113b8c4c8d6ff86cb77230ac90f382fa97ceafcb7a64f642ee0bf01130bcacf0","ssdeep":"","tlshash":"da213af3e2c1c6e2f54aeba0ca7a6475306b14fb2f42c3a104815e65d6814ac688ac78","first_seen":"2026-01-27T11:14:45.087734Z","last_seen":"2026-04-08T17:22:34.494454Z","times_seen":9,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/currencies-CuzGmkPb.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/currencies-CuzGmkPb.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BzWr35jDTtnGGM29nNia6%2BdazRLvoItLFXHXaTSnceHkg8ObfygGosDJ6OqPoJKGBtki2Wpj6U88Az09SFOEwEsITYI0WEv15JB%2FXks%3D\"}]}\r\ncf-ray: 9cdaa16ba88b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2809,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2808)","md5":"0a8544f152db3c08dfb03e6cdf734781","sha1":"1468ebe8977a0ca4f448259b242839a04f7a12f4","sha256":"4a39631615777b2222de2bb319cc240b086ff9e7ece8af21c56a5160bc29a18c","sha512":"e713196549037210d0c8d45a16bd8b234b45af324b55ffaaf89ce9f25b4eebd3a17b8ec72496ce7df871d75b0e51f992fb3f9b220828f26bd446869c8f142d2d","ssdeep":"","tlshash":"8f51cfef95a38c540f21e4eba23070dde079659dfca2e4dabbd4400852f538664a0fb3","first_seen":"2025-12-29T12:30:45.838649Z","last_seen":"2026-03-20T19:18:18.608824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T06:50:18.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DI3CX8APe6dUX24D9cjwn3Kg6Q2QQ8WL%2BrDRCN1Kos5IjCxkeMdvbtYNW59NQ10kUCskfiI7OL0CVXAx9Jh30dJSiGy8A145M7KN9%2B0%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdaa166bf6f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6503,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"741ef5ab78d6f33949e00395a7215a5b","sha1":"7ece3d6dc47dabd0abe3dba31d29320e78fa8a50","sha256":"d0fc6d762724a7eaddd5c7466259ebef1294712397a32c38cc3c2bf362842ee5","sha512":"f3ade88a530f8ea47200a4e1e14322d81dae33267003c438c026fea14d6b1eb641407835559800ff5b210beac9657cfe09fe4117b690f0021917ff90a11f4973","ssdeep":"96:XTJ4M7IshzjM7IsCAZUSiM7IsB7d0r0L/VMk3Bk3RHk3/I8i4:XTJxhmD3JT+OBORHO/I8T","tlshash":"0bd100a79a80487603b141646af2f10dea2f428bd2191e0673bc55ef0ff29d1c5e7b5e","first_seen":"2026-01-27T11:14:45.084308Z","last_seen":"2026-02-14T06:50:44.819275Z","times_seen":8,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":22,"dns":9,"connect":1,"send":0,"wait":73,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/api/auth/get-session","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /api/auth/get-session HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pO9oTf82JttFI0WIHtQaFM%2FOPY%2FiwAmJtWVaJwlhqhfPMne%2F8AogGF2flUglclbLpaQcV5FDbczIMtYpabuBJpWB3s4tM9F5yJlFNcg%3D\"}]}\r\ncf-ray: 9cdaa16a885a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-04T19:55:50.732252Z","times_seen":281194,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"malgoswap.com/assets/loader-circle-CMcDfjan.js","fqdn":"malgoswap.com","domain":"malgoswap.com","tld":"com"},"ip":{"addr":"172.67.218.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"malgoswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 13:29:57 GMT","end":"Tue, 28 Apr 2026 14:27:17 GMT"},"fingerprint":{"sha1":"E6:CD:E2:FB:65:E3:BA:22:23:83:B0:05:57:11:A0:33:A2:22:C1:11","sha256":"C5:6A:F1:FB:DB:74:A2:E1:2D:97:69:09:1F:AF:0A:93:FB:A6:72:70:EE:A4:24:80:22:32:57:03:62:87:AA:9E"}}},"request":{"raw":"GET /assets/loader-circle-CMcDfjan.js HTTP/1.1\r\nHost: malgoswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/assets/index-C05VmP94.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 06:50:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 06:50:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7UwZeHcGA3dGw0iDfWwNEXtSLV6AmhumJXYbor9ja%2Bc0RlqjRz1fcqa%2FjQp%2FnAQfSoAZMjwq88vid2A6tmceLtnWYN5Ev9xE1%2BhW%2BY%3D\"}]}\r\ncf-ray: 9cdaa16bb88f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"71afef50f4275c150288462b2990f2b0","sha1":"6d0728616ca4bc7411a1e81109839a771db39453","sha256":"97cd475a5dc969055aef17f4526be8512be7e7698a550add5427f3d40d232298","sha512":"14cbf50e000c62e816b6052f7c99ed763c5abc3f824757cad795ea2518dfa32a62ce733196f7f02935d09f36c64356b5c6165d6d01a7e315d4523ca1e5f1e118","ssdeep":"","tlshash":"3ae07d2b1e6413b301938c781b0ae6c96b051599435e33a07011832c89310efc2dfdc0","first_seen":"2026-01-27T11:14:45.072368Z","last_seen":"2026-02-14T06:50:44.785875Z","times_seen":8,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"malgoswap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/master/128/white/sol.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/master/128/white/sol.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"fa53ff5eb26f780925dabed1f4a37c71cb9fc628eba35a10a1e59a9c97ae8ae0\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 3D2C:68617:AEDC32:C30CC2:69901B2A\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.998544,VS0,VE115\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 9988f3e58665e2111daaf41a714237ee9f75a8a8\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 3540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4c8330feb125e95cf717ee3c510cded9","sha1":"455c69c1a043b41d39ec82325feb1aeef8eabd46","sha256":"081c8ba38d1f73d611fdd9bfe110fc6f41bceccce11496cad58b93c7206611b3","sha512":"cd22b172079fdd01c68f0a207dff19c18d3c53c1e6953f10d95414f8dc7195930efb5b39d5299052ae00ce46f737c0c333685d60612d5f6030e6f365504f9edf","ssdeep":"","tlshash":"2c717cc1eda8198ac6024d7783ccff393ed180a88ad0a041c5090e94da8cb599fa564e","first_seen":"2025-08-08T05:26:47.560564Z","last_seen":"2026-03-20T19:18:18.621394Z","times_seen":17,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":136,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdc.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:18.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/icon/usdc.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://malgoswap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b183d6d3f5636c8fb1f970cbcfd6486123334daf293bf5684e171c84d2122df0\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 9E2C:61327:B292A1:C6C549:69901B2A\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 06:50:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771051819.999715,VS0,VE151\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: ac2a3878cf92fcf2d75961a3e40275618bea8b81\r\nexpires: Sat, 14 Feb 2026 06:55:19 GMT\r\nsource-age: 0\r\ncontent-length: 1152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2414,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cb90f28a9ed0e48cab17dbdd7c99ec1","sha1":"424fa9ae05a1f82d6bb56a3162c57e26f71b1396","sha256":"811778b340917467c0bb54ba30263deda1e1c4f039a8b2e838236cc0183ec602","sha512":"181afaf94a26ab1bc8acded7ccf4dcf01db578d6b810f1941621ece279a3e266e9fd7e4f0cf6975239876064892c64181488f39013cd97925577628d3fb9da14","ssdeep":"","tlshash":"d0415651a278751e7c5b876aebf0a0e5531f50fe31eac145a9de8b08a01bad2b246d40","first_seen":"2023-11-29T10:09:34Z","last_seen":"2026-06-06T23:49:41.806227Z","times_seen":22,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":164,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://malgoswap.com/","date":"2026-02-14T06:50:19.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbV2o-flEEny0FZhsfKu5WU4xD7OwE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://malgoswap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 02:54:25 GMT\r\nexpires: Sat, 13 Feb 2027 02:54:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:35 GMT\r\ncontent-type: font/woff2\r\nage: 100554\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-08-04T19:14:04.64141Z","times_seen":2786,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":433,"dns":0,"connect":20,"send":0,"wait":8,"receive":4,"ssl":415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}