{"report_id":"b63449ab-71a5-4838-84c7-259cbca659b5","version":6,"status":"done","tags":[],"date":"2026-02-05T11:32:40Z","url":{"schema":"http","addr":"sunswap.hk","fqdn":"sunswap.hk","domain":"sunswap.hk","tld":"hk"},"ip":{"addr":"186.2.175.25","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"sunswap.hk/","fqdn":"sunswap.hk","domain":"sunswap.hk","tld":"hk"},"title":"SunSwap | A decentralized exchange protocol for automated liquidity provision on TRON","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sunswap.hk","fqdn":"sunswap.hk","domain":"sunswap.hk","tld":"hk"},"ip":{"addr":"186.2.175.25","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-12T11:32:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"sunswap.hk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sunswap.hk","ip":{"addr":"186.2.175.25","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-02-05T11:32:41.369486Z","last_seen":"2026-02-05T11:32:41.369487Z","alert_count":2,"request_count":2,"received_data":4494517,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sunswap.hk/","fqdn":"sunswap.hk","domain":"sunswap.hk","tld":"hk"},"ip":{"addr":"186.2.175.25","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-05T11:32:14.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sunswap.hk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 20:28:09 GMT","end":"Wed, 22 Apr 2026 20:28:08 GMT"},"fingerprint":{"sha1":"CB:CB:FC:4B:EC:F2:B7:5F:47:7B:26:47:8A:57:3F:9A:CC:19:22:68","sha256":"51:AC:17:48:D6:DA:C6:C0:47:7D:1E:FF:3D:A1:05:2E:35:3F:55:43:15:2F:C7:41:C6:3D:44:A8:80:0C:67:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sunswap.hk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Dmd07iHLNWS9Ub0B; Domain=.sunswap.hk; Path=/; Expires=Thu, 05-Feb-2026 11:52:15 GMT\n__ddg10_=1770291135; Domain=.sunswap.hk; Path=/; Expires=Thu, 05-Feb-2026 11:52:15 GMT\n__ddg9_=91.90.42.154; Domain=.sunswap.hk; Path=/; Expires=Thu, 05-Feb-2026 11:52:15 GMT\n__ddg1_=n0Xn2iSnL51jD4LuBhPK; Domain=.sunswap.hk; HttpOnly; Path=/; Expires=Fri, 05-Feb-2027 11:32:15 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Feb 2026 11:32:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1163461,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63621)","md5":"8f1185df60f7bb0373b501b468ffce00","sha1":"54b5e6341ee95d72541a005127889b7ca3620770","sha256":"ca446e1f5e65254d7507898a0f06d152f7e40d307598d2e12d7bc7ebc6f0c7c3","sha512":"815af58764e57cc4114f0f910d51d2e2b9fe88577985a71b3f70a1bfc3cec55125ea716e997d22158fbfbb6226aa0c7f50dd1f53c932a3791f1151fa400c6c7d","ssdeep":"24576:i4MvP7pVutzmdO9flPTYiwE87ZkY5v3cG1n0floDTrweS:iBsaiTYzE8lR5vb0ETsL","tlshash":"df25dfb1391254b88f9a91000a1dfe6c8f74e9f76494ac60b56c3bc0efd46a4f9f8467","first_seen":"2026-02-05T11:32:48.668436Z","last_seen":"2026-02-05T11:32:48.668436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":312,"dns":263,"connect":18,"send":0,"wait":220,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"sunswap.hk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunswap.hk/vendor-041fc26546f8ca98.min.js","fqdn":"sunswap.hk","domain":"sunswap.hk","tld":"hk"},"ip":{"addr":"186.2.175.25","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sunswap.hk/","date":"2026-02-05T11:32:15.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sunswap.hk","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 20:28:09 GMT","end":"Wed, 22 Apr 2026 20:28:08 GMT"},"fingerprint":{"sha1":"CB:CB:FC:4B:EC:F2:B7:5F:47:7B:26:47:8A:57:3F:9A:CC:19:22:68","sha256":"51:AC:17:48:D6:DA:C6:C0:47:7D:1E:FF:3D:A1:05:2E:35:3F:55:43:15:2F:C7:41:C6:3D:44:A8:80:0C:67:63"}}},"request":{"raw":"GET /vendor-041fc26546f8ca98.min.js HTTP/1.1\r\nHost: sunswap.hk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Dmd07iHLNWS9Ub0B; __ddg10_=1770291135; __ddg9_=91.90.42.154; __ddg1_=n0Xn2iSnL51jD4LuBhPK\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=P2NAUQzKAsYtY2C8; Domain=.sunswap.hk; Path=/; Expires=Thu, 05-Feb-2026 11:52:15 GMT\n__ddg10_=1770291135; Domain=.sunswap.hk; Path=/; Expires=Thu, 05-Feb-2026 11:52:15 GMT\n__ddg9_=91.90.42.154; Domain=.sunswap.hk; Path=/; Expires=Thu, 05-Feb-2026 11:52:15 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Feb 2026 11:32:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Jan 2026 08:32:39 GMT\r\netag: W/\"696f3da7-32cee9\"\r\nexpires: Fri, 06 Feb 2026 11:32:15 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3329769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e9eed6d40d9139af7c4d68f5652cba76","sha1":"14a5d4026de742544ad438d7bf7d612f4c10332c","sha256":"ef630c2c7b008cbbfde79b297d977f1ac754a25f7f7ae3274de3ab4853337a36","sha512":"63f775162efc842c3ff2f395b75b385226425d3aa8bcf09c81bd53f723de832b5eec13566553ec6778c76a9b5204fb83879a6bf83ce30f9211f00e38a4e6f284","ssdeep":"24576:2jk+k9rU/Qhm4RXO0r2yCdCTCOCXCBNBH43BCWCgCFCMC9jDfRQHPoUT9FusNFhP:KgU/gWRDuJ2O6yJVBD","tlshash":"ef259303a2d1386605d39fb27a2750daec2d8bef658c5a79b44dfc3878e4054e6ec670","first_seen":"2026-01-20T14:57:59.260332Z","last_seen":"2026-04-05T09:53:24.346328Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"sunswap.hk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}