{"report_id":"b93fca2d-b9b5-4cd1-8d34-c456bfb2f461","version":0,"status":"done","tags":[],"date":"2026-06-23T18:39:52Z","url":{"schema":"http","addr":"crv-curve-swap.org","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"104.21.75.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"crv-curve-swap.org/","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"title":"ZeroLend: Decentralized Crypto Lending \u0026 Borrowing Protocol","dom":{"size":91917,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (563)","md5":"dd203d7b1ae993aadbb8e1975c718516","sha1":"5e83b73a7c979cbba86ad6e2fc46301f55b6568b","sha256":"36b1ec1f10397be44dd44b90dc424c7b214ae2c2f93e260a96414b5a2d99bc2d","sha512":"4c6c650687d687eb1ad23a337da9166686024aa516309bfb2f88138bd821ae958bdbae8f31648e940b4974c2ae91d872c53c3c9210cca2a2d0737901a1d19b82","ssdeep":"1536:lka811nCR++2qka811nCR++29ka811nCR++2g:SaF++27aF++2aaF++2g","tlshash":"4a9363362150227b098311e1b7326f4b77a5cb13eb17221572fe83dd1fe1f8a962764a","dom_hash":"domhasha38b08ee7ea05017de3af5f4802a2581","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crv-curve-swap.org","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"104.21.75.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-28T18:39:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"leostop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"crv-curve-swap.org","ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-19","domain_rank":0,"first_seen":"2026-06-23T18:39:54.293615Z","last_seen":"2026-06-23T18:39:54.293615Z","alert_count":99,"request_count":33,"received_data":1830899,"sent_data":15858,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"leostop.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-05-22","domain_rank":463898,"first_seen":"2014-12-29T02:04:51Z","last_seen":"2026-06-18T23:49:04.382137Z","alert_count":3,"request_count":3,"received_data":0,"sent_data":1443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":3,"received_data":131847,"sent_data":1671,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":23024,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crv-curve-swap.org/js/jquery-3.4.1.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-06-23T20:17:05.907974Z","times_seen":7157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/bootstrap.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4f8d0f7ba25142cf1eabfcf2e21286","sha1":"4ea41fdcfac2eb71034e85d36ae6a19bd894c442","sha256":"c670cfe1d636455a63f09f7bc73c696e26f7c490dc8bf2ebf431d12d41290cf0","sha512":"733034d28de1e20e92100bda686b8c95d9a61631ee5fc0e0d2ec991fc9a266e6a00282d5aa6bb794d4b5a4e48b4d613b50d15d1f84aa238766e6d3d8da658bc8","ssdeep":"1536:tvMGhlDUiDuvlkC5u71LK/x+m5uDEqFmd4NAj:t9UiOlkan5cEqFTNA","tlshash":"b2d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","size":136747,"data":"","first_seen":"2023-03-10T09:28:54Z","last_seen":"2026-06-23T18:41:05.880692Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-23T22:14:25.204936Z","times_seen":376618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/custom.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f82e85eaaf83eebef15f84db196952a","sha1":"baee1ddefac79add72fe6be4b6cf5e1adcd765a8","sha256":"c326974e5e3d38f5785378449883b3363bc1e2920865ba970a36f358c52feb49","sha512":"99b6d9e5020f6503c3d197898361e4c2e5708a4964bca2f4dea7e3621e070fdf72a081c1859ed90d2736c9d35484edbd270afd7c916d02652b704daf98112b9a","ssdeep":"","tlshash":"8811c20661282135cc7f73665ab45209ffba431fa40286237dfc43801f3b5999299ecb","size":995,"data":"","first_seen":"2025-06-29T22:21:13.937737Z","last_seen":"2026-06-23T18:41:05.885378Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/jquery-3.4.1.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-06-23T20:17:05.907974Z","times_seen":7157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/custom.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f82e85eaaf83eebef15f84db196952a","sha1":"baee1ddefac79add72fe6be4b6cf5e1adcd765a8","sha256":"c326974e5e3d38f5785378449883b3363bc1e2920865ba970a36f358c52feb49","sha512":"99b6d9e5020f6503c3d197898361e4c2e5708a4964bca2f4dea7e3621e070fdf72a081c1859ed90d2736c9d35484edbd270afd7c916d02652b704daf98112b9a","ssdeep":"","tlshash":"8811c20661282135cc7f73665ab45209ffba431fa40286237dfc43801f3b5999299ecb","size":995,"data":"","first_seen":"2025-06-29T22:21:13.937737Z","last_seen":"2026-06-23T18:41:05.885378Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-23T22:14:25.204936Z","times_seen":376618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/custom.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f82e85eaaf83eebef15f84db196952a","sha1":"baee1ddefac79add72fe6be4b6cf5e1adcd765a8","sha256":"c326974e5e3d38f5785378449883b3363bc1e2920865ba970a36f358c52feb49","sha512":"99b6d9e5020f6503c3d197898361e4c2e5708a4964bca2f4dea7e3621e070fdf72a081c1859ed90d2736c9d35484edbd270afd7c916d02652b704daf98112b9a","ssdeep":"","tlshash":"8811c20661282135cc7f73665ab45209ffba431fa40286237dfc43801f3b5999299ecb","size":995,"data":"","first_seen":"2025-06-29T22:21:13.937737Z","last_seen":"2026-06-23T18:41:05.885378Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/jquery-3.4.1.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-06-23T20:17:05.907974Z","times_seen":7157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/bootstrap.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4f8d0f7ba25142cf1eabfcf2e21286","sha1":"4ea41fdcfac2eb71034e85d36ae6a19bd894c442","sha256":"c670cfe1d636455a63f09f7bc73c696e26f7c490dc8bf2ebf431d12d41290cf0","sha512":"733034d28de1e20e92100bda686b8c95d9a61631ee5fc0e0d2ec991fc9a266e6a00282d5aa6bb794d4b5a4e48b4d613b50d15d1f84aa238766e6d3d8da658bc8","ssdeep":"1536:tvMGhlDUiDuvlkC5u71LK/x+m5uDEqFmd4NAj:t9UiOlkan5cEqFTNA","tlshash":"b2d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","size":136747,"data":"","first_seen":"2023-03-10T09:28:54Z","last_seen":"2026-06-23T18:41:05.880692Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-23T22:14:25.204936Z","times_seen":376618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/bootstrap.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4f8d0f7ba25142cf1eabfcf2e21286","sha1":"4ea41fdcfac2eb71034e85d36ae6a19bd894c442","sha256":"c670cfe1d636455a63f09f7bc73c696e26f7c490dc8bf2ebf431d12d41290cf0","sha512":"733034d28de1e20e92100bda686b8c95d9a61631ee5fc0e0d2ec991fc9a266e6a00282d5aa6bb794d4b5a4e48b4d613b50d15d1f84aa238766e6d3d8da658bc8","ssdeep":"1536:tvMGhlDUiDuvlkC5u71LK/x+m5uDEqFmd4NAj:t9UiOlkan5cEqFTNA","tlshash":"b2d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","size":136747,"data":"","first_seen":"2023-03-10T09:28:54Z","last_seen":"2026-06-23T18:41:05.880692Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"jQuery.Deferred exception: $(...).niceSelect is not a function@https://crv-curve-swap.org/js/custom.js:12:17\ne@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29453\nDeferred/then/l/\u003c/t\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29755\nsetTimeout handler*Deferred/then/l/\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29964\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nfire@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28523\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nready@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31460\nB@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31239\nEventListener.handleEvent*@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31608\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:220\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:225\nmap[type:undefined]","filename":"https://crv-curve-swap.org/js/jquery-3.4.1.min.js","line_number":0,"column_number":0},{"level":"warn","text":"jQuery.Deferred exception: $(...).datepicker is not a function@https://crv-curve-swap.org/js/custom.js:17:21\ne@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29453\nDeferred/then/l/\u003c/t\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29755\nsetTimeout handler*Deferred/then/l/\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29964\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nfire@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28523\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nready@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31460\nB@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31239\nEventListener.handleEvent*@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31608\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:220\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:225\nmap[type:undefined]","filename":"https://crv-curve-swap.org/js/jquery-3.4.1.min.js","line_number":0,"column_number":0},{"level":"warn","text":"jQuery.Deferred exception: $(...).niceSelect is not a function@https://crv-curve-swap.org/js/custom.js:12:17\ne@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29453\nDeferred/then/l/\u003c/t\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29755\nsetTimeout handler*Deferred/then/l/\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29964\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nfire@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28523\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nready@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31460\nB@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31239\nEventListener.handleEvent*@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31608\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:220\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:225\nmap[type:undefined]","filename":"https://crv-curve-swap.org/js/jquery-3.4.1.min.js","line_number":0,"column_number":0},{"level":"warn","text":"jQuery.Deferred exception: $(...).datepicker is not a function@https://crv-curve-swap.org/js/custom.js:17:21\ne@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29453\nDeferred/then/l/\u003c/t\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29755\nsetTimeout handler*Deferred/then/l/\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29964\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nfire@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28523\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nready@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31460\nB@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31239\nEventListener.handleEvent*@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31608\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:220\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:225\nmap[type:undefined]","filename":"https://crv-curve-swap.org/js/jquery-3.4.1.min.js","line_number":0,"column_number":0},{"level":"warn","text":"jQuery.Deferred exception: $(...).niceSelect is not a function@https://crv-curve-swap.org/js/custom.js:12:17\ne@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29453\nDeferred/then/l/\u003c/t\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29755\nsetTimeout handler*Deferred/then/l/\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29964\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nfire@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28523\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nready@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31460\nB@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31239\nEventListener.handleEvent*@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31608\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:220\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:225\nmap[type:undefined]","filename":"https://crv-curve-swap.org/js/jquery-3.4.1.min.js","line_number":0,"column_number":0},{"level":"warn","text":"jQuery.Deferred exception: $(...).datepicker is not a function@https://crv-curve-swap.org/js/custom.js:17:21\ne@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29453\nDeferred/then/l/\u003c/t\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29755\nsetTimeout handler*Deferred/then/l/\u003c@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:29964\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nfire@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28523\nc@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:27742\nfireWith@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:28487\nready@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31460\nB@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31239\nEventListener.handleEvent*@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:31608\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:220\n@https://crv-curve-swap.org/js/jquery-3.4.1.min.js:2:225\nmap[type:undefined]","filename":"https://crv-curve-swap.org/js/jquery-3.4.1.min.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"crv-curve-swap.org/js/bootstrap.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.985Z","timestamp":1782239959985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/bootstrap.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"2162b-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W46FBXR30LYD8axQLNzh1eX1zau5mDB7ivJ%2BMIE%2FVx5CtfyD4KEIuhQvKoj06JTT8jeIzMPW9OUUT15%2FgtzTeigNzpgofANIu3%2Fa1M6pjoh1nqXRcZgwfl%2FAzRZ2VJDGbZA2y1g%3D\"}]}\r\ncontent-length: 25429\r\ncf-ray: a1059d65eb2d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136747,"size_decoded":26193,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (328)","md5":"1d4f8d0f7ba25142cf1eabfcf2e21286","sha1":"4ea41fdcfac2eb71034e85d36ae6a19bd894c442","sha256":"c670cfe1d636455a63f09f7bc73c696e26f7c490dc8bf2ebf431d12d41290cf0","sha512":"733034d28de1e20e92100bda686b8c95d9a61631ee5fc0e0d2ec991fc9a266e6a00282d5aa6bb794d4b5a4e48b4d613b50d15d1f84aa238766e6d3d8da658bc8","ssdeep":"1536:tvMGhlDUiDuvlkC5u71LK/x+m5uDEqFmd4NAj:t9UiOlkan5cEqFTNA","tlshash":"b2d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","first_seen":"2023-03-10T09:28:54Z","last_seen":"2026-06-23T18:41:05.880692Z","times_seen":93,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.419Z","timestamp":1782239960419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QLZ0q5YBaV9DIRmm9%2FODR6koOC%2FPEPBvC3nUHpZfxKNqAbtg709mTuk5J65t%2FQ7tkAaSLHtDtKkb7WWCssIk2Ddlf8Ccgh%2F7YHaOqXaqOEKt3eE6P0H3%2BoaTE2GqHU8v5uK%2FIM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1059d68ab7356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94413,"size_decoded":8423,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (563), with CRLF, LF line terminators","md5":"4a73544fdd220992528b8b1a74f1d9f4","sha1":"3afb4b68e2d4bd3002e4fe6cc3f31cd51140ae1e","sha256":"60ce6c3ae580e2eea9055484d292d5ff6e62dec633ee3f049e78c412889ce3d9","sha512":"04590c9c79e98e1413803fce5b656327bac5088da125c23a1f4028ee1edfeb1f02221a1991759908b9d92aab423e82c296523bc8397dbfca2a4ac3cda5c46c56","ssdeep":"1536:rswe53ncxIIhsswe53ncxIIhFswe53ncxIIhz:QwzIIhlwzIIhKwzIIhz","tlshash":"f593313225912d7b09b341f9a121678bf7a5c342e703521432ff638f9ff1e0a96a7646","first_seen":"2026-06-23T16:15:28.564708Z","last_seen":"2026-06-23T18:41:05.896446Z","times_seen":5,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leostop.com/tracking/tracking.js?_=1782239960512","fqdn":"leostop.com","domain":"leostop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.686Z","timestamp":1782239960686,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tracking/tracking.js?_=1782239960512 HTTP/1.1\r\nHost: leostop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-23T22:14:30.23529Z","times_seen":16663220,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"leostop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/css/bootstrap.css","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.967Z","timestamp":1782239959967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /css/bootstrap.css HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:45 GMT\r\netag: \"2ef5c-639f5f080af40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAe3dMYDZ2zHfi9JGa%2B8wYCr6X3n%2B%2BZ%2BpDhKSQpMZ%2FcPcVhDIbLrxWQC13nPKcorPt2Vasnq4BneHmSRcx%2FIXrGOJd5kh%2FBBoPgxr%2FM29PrI94HT15cyGvOBNgMQ1vKBkoVxwkI%3D\"}]}\r\ncontent-length: 25436\r\ncf-ray: a1059d65cb2556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192348,"size_decoded":26199,"mime_type":"text/css","magic":"ASCII text, with very long lines (570)","md5":"bd551f56ce2be3eba2812e605ab4f5b2","sha1":"94d6450720dd8deb413760cc9184204b46802e9c","sha256":"35fbb6dc3891aacaf1ffa07abec2344fdbc454aab533a2a03bcf93577eb7837b","sha512":"3310948ae23eb805e0afd67d7f11f563cd829ea46b5b2496a877a367250c5b9e5526a2f8b6b7fd15733f4a24fb3505d97781f49c93abe85000253123026ae6f8","ssdeep":"1536:2ycclspJfXkgUpuoRnm4ADXeASzja+QTzNlXK1wqLq9S/zDL4iDF4jg:25jkgUA2wqsS/zDL4iDF40","tlshash":"60147458fdf11504746b826c64d6f7f57b6d8087c61edebabae22224cf493c14cb2988","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-06-23T20:26:49.141333Z","times_seen":1569,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/slider-img.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.995Z","timestamp":1782239959995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/slider-img.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:59 GMT\r\netag: \"18571-639f5f1564ec0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auFsQQayzZDcE2q9L3nZDzrkChePjZOHI5elcJZICf4abeYTFCecw6nnrkIW%2BT%2FzI6NmvhE%2F%2BnU%2FqhpnJn04dTRF5BW9OjGda4xaDVZZPBuCpqMw8fF3andSmbukg5ICiNA1VO4%3D\"}]}\r\ncontent-length: 99697\r\ncf-ray: a1059d65fb3156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99697,"size_decoded":100400,"mime_type":"image/png","magic":"PNG image data, 627 x 600, 8-bit/color RGBA, non-interlaced","md5":"21fe198a8239d688037168fa0e61e6a5","sha1":"129810ca0d6ffcee0aeb726c7acfe1ad99a4d9e9","sha256":"2f4a8e7d5bde0d53169d8389f746aee7209dcb5d958223786461fc582dcd8caf","sha512":"af88c28d2399fd8c878e3520a2bc97067cb35550369c3b43d615bc83a3cd6b2506c91419b05906d5e8863d3e715412418df99c028d5907704568fb3710b83c10","ssdeep":"3072:44gpXQgrf5TxeVrk6jir9SpccubXoHc6TwYKW+:JIggrftsVXjipHcuoCYt+","tlshash":"0ca3123796999706c62e4c0f4e6ad54b8b7e95abb4f737657e0030ba830683b084753f","first_seen":"2025-06-29T22:21:13.928531Z","last_seen":"2026-06-23T18:41:05.89972Z","times_seen":27,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/s1.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.997Z","timestamp":1782239959997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/s1.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:54 GMT\r\netag: \"14a2-639f5f10a0380\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEU%2Ftmd1Jsm6sATf25iEO7YMBHIFtEidVkruN%2B9z%2F6TCckUn4aKULt7m4JPuX%2Bu%2BpxQDBt3%2Bo5cf%2BlLzW5N1u5agV7IbmmNymjoGyRD3KYUSBlL4oZq760pieXFM0VZK3n21lMg%3D\"}]}\r\ncontent-length: 5282\r\ncf-ray: a1059d65fb3256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5282,"size_decoded":5987,"mime_type":"image/png","magic":"PNG image data, 194 x 168, 8-bit colormap, non-interlaced","md5":"ae5802ff8af64213664e01e8d27d329b","sha1":"72f7b032e2d2110a0ffa579a95e317ce5f422a90","sha256":"7fc2a25d719e9368ab37f708eb27d2d674c13ecfdc5790281316e6639506663f","sha512":"0a5225d62671576e30f41f8139d5d375323ad096a4297a4fa851a836e8a43fc52521be338e1a87e6fa4bf28f8543bd30994631ebd3711130de9636394450c5c1","ssdeep":"96:2Tft3uUJ8hN1jpJ8iuMSzH//apfjV7hALFyPAcNkGAYyqz:2b8hNd3elHEWpeAcNSY/","tlshash":"7bb17ed092763a4854954349eb1e00a377ec0d925a5bef43a559752cfb3316184a62cc","first_seen":"2025-06-29T22:21:13.920777Z","last_seen":"2026-06-23T18:41:05.892432Z","times_seen":29,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/s4.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.003Z","timestamp":1782239960003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/s4.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:19:01 GMT\r\netag: \"10a8-639f5f174d340\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZVkv7ElDxKPCS%2FhLiv%2BZhVshULbs%2BDg1XxhWsV18kZXsIQehKve2XTBdQsEVWI1voFCpiGWW6bqnIFd3bvwciue8175sgUCwifxx2hB40X2c0sl82gHyyx0gKyO8pPl54kCN5c%3D\"}]}\r\ncontent-length: 4264\r\ncf-ray: a1059d660b3756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4264,"size_decoded":4961,"mime_type":"image/png","magic":"PNG image data, 166 x 200, 8-bit colormap, non-interlaced","md5":"8fdbb1a25af713c19d655dd329ec0c17","sha1":"7b2332496220cab658dec5b37b1d9da2e379aad0","sha256":"5126f5ec79c874005cc849fc2d9dccb6cf06cba8e82b7a92e53814e2436c9093","sha512":"26bcded2a5efb25bd16a3ab31449d08a03a732ca9619c009508195543495e5ff2e87c0daa87ceacbba3397641f6a90429aacc14e5093106951fa07fcbdd8e914","ssdeep":"96:7j65WjS4ioz0Rg0EMe771g1dMlVcH1o1584Yu5U:SUjTioIiJMm6IceA4Y2U","tlshash":"4d915dc1e770d9d28254efd4a70f1426b1821d86814f584ed6a4723f1c3ea9882e73ed","first_seen":"2025-06-29T22:21:13.926162Z","last_seen":"2026-06-23T18:41:05.893174Z","times_seen":27,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.244Z","timestamp":1782239960244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crv-curve-swap.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 18 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462102\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-23T22:15:52.803653Z","times_seen":199064,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":28,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leostop.com/tracking/tracking.js?_=1782239960256","fqdn":"leostop.com","domain":"leostop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.503Z","timestamp":1782239960503,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tracking/tracking.js?_=1782239960256 HTTP/1.1\r\nHost: leostop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-23T22:14:30.23529Z","times_seen":16663220,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"leostop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.969Z","timestamp":1782239959969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 23 Jun 2026 18:39:20 GMT\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":2448,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"902507b7a40d993780ab84c27ebef044","sha1":"4574f291820fb61544c68b14d01802021d6a327a","sha256":"968957cbffd47371ce7a70121bee77163b2339821175c66c10b43430f06b1815","sha512":"4f362412abe70cc6a3b966eca467d2c148b35fe4ecb336390ab6834ab0ed1cdb22ef7fbe7e3e7b07d518410c3a74e54f8d94c527f5f2fa181cd3e5a3cd1f4dfa","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/I:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVq","tlshash":"2da21fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T01:00:52.43846Z","last_seen":"2026-06-23T19:36:15.731312Z","times_seen":842,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":37,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.979Z","timestamp":1782239959979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 25 Jun 2026 18:39:19 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VnzSmj%2BO5mdPM1Je1QHpd3%2F1ffhHsaYEZYD2d6jkCZoqF%2FoFRdJEy6Q2EKiGRR6pASfcuwpbt6eUWelPltMfpnr3w7YWZE%2F31Jk75lpXkyRTmwvYOBxcvFOfjPYVQrZ7v%2F58TTQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 23 Jun 2026 18:39:19 GMT\r\nserver: cloudflare\r\ncf-ray: a1059d65eb2a56bd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-23T22:14:25.204936Z","times_seen":376618,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/about-img.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.007Z","timestamp":1782239960007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/about-img.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:19:00 GMT\r\netag: \"298df-639f5f1659100\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Trdy2cqP7PNtDDREnl31KCwrsXGIjhmU4P8XEHmjZU%2BcKy3KjvSf%2FyN2yKFk1aLTEEXoPkAL8IbBZd%2FweRdE0rnPrHzGT9zvFZVh%2BACI54BK%2BLZbK2Y%2FQZUt5Rky1LT5AAITQtc%3D\"}]}\r\ncontent-length: 170207\r\ncf-ray: a1059d660b3a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170207,"size_decoded":170913,"mime_type":"image/png","magic":"PNG image data, 865 x 600, 8-bit/color RGBA, non-interlaced","md5":"29c5df4675b855d207c03e41fd1b9297","sha1":"c69f996b33ed299b3874b05c363f4566c0ba95a7","sha256":"4cab51c4cac3c5728767bada4162fdbe25d23c856888edf802fadb0ebbbe6138","sha512":"56af3bf4a17f2082e2f568a6033f4ca1d1abe0d5c9791e821119ae30d854d2a344470fa7019114e27389e7059f5c6a3cc0c25c9998f3c733f9f7d19113b41010","ssdeep":"3072:L7dbwLzcHid8HKIhkhS3SBMY6AU+qydSgRDnhAW6kGoLp9tjOfsN7W:LAUKIhkzTU4rnyWDtjOfsk","tlshash":"64f31258dbff5432821844700b736f42ba430aa78799c11f7a1ba5c354b1e4be4bb197","first_seen":"2025-01-08T03:45:37.374169Z","last_seen":"2026-06-23T18:41:05.893905Z","times_seen":27,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.236Z","timestamp":1782239960236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crv-curve-swap.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 18 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462102\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-23T22:15:52.803653Z","times_seen":199064,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":39,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/jquery-3.4.1.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.665Z","timestamp":1782239960665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"15851-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BcCeJiCYctuBAp%2F%2BFLebme1lCJkcyB36nSYi9ieMQdx9VPAeHGk9ErBrt89Zxs54Pa23eanONt%2FAWFUk4QoDgeL%2B43sh5Y1Sge8sxe6Q9jcjQTA01q6q7369wYkvbSfP7Uk5QE%3D\"}]}\r\ncontent-length: 30679\r\ncf-ray: a1059d6a2bb856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":31450,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-06-23T20:17:05.907974Z","times_seen":7157,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/bootstrap.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.733Z","timestamp":1782239960733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/bootstrap.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"2162b-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uUXjHjxpkWMJEk%2F%2BI%2FOC%2F%2FnWjQ3wIulA0jcT5Ln1XLM2CGaDJnqPj%2F0tMzHxSNUsHTXAqS%2BrW6oqbbB%2FxkxIBVV7%2Bb3SndDyr86COFkf9IR6U3tRU3fcrtOT3JTTVdcvFBj5zw%3D\"}]}\r\ncontent-length: 25429\r\ncf-ray: a1059d6a9bd356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136747,"size_decoded":26208,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (328)","md5":"1d4f8d0f7ba25142cf1eabfcf2e21286","sha1":"4ea41fdcfac2eb71034e85d36ae6a19bd894c442","sha256":"c670cfe1d636455a63f09f7bc73c696e26f7c490dc8bf2ebf431d12d41290cf0","sha512":"733034d28de1e20e92100bda686b8c95d9a61631ee5fc0e0d2ec991fc9a266e6a00282d5aa6bb794d4b5a4e48b4d613b50d15d1f84aa238766e6d3d8da658bc8","ssdeep":"1536:tvMGhlDUiDuvlkC5u71LK/x+m5uDEqFmd4NAj:t9UiOlkan5cEqFTNA","tlshash":"b2d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","first_seen":"2023-03-10T09:28:54Z","last_seen":"2026-06-23T18:41:05.880692Z","times_seen":93,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/css/style.css","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.974Z","timestamp":1782239959974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:45 GMT\r\netag: \"52a9-639f5f080af40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6318G8mH9ulDugxFgcoyHgHk95OLkNHv4bvNL3hp5fJ%2FqQo7ZI7Jr5rxWzhYgNFJ%2FoPTof8lvFNHDX5k9pqBDF%2B8DNE1qdR7nj1NrvzCKi0cEuezAVIgIXfQMHI7%2BxKyJJHm%2B3Y%3D\"}]}\r\ncontent-length: 2895\r\ncf-ray: a1059d65db2856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21161,"size_decoded":3650,"mime_type":"text/css","magic":"ASCII text","md5":"75715fcb25d669fc74660324463e2ebf","sha1":"71292f30f54ecd79f57a5eb0f9c5f44cd08574c6","sha256":"4fad39218998420354b5a65d19cadf3519e5ad88f85515891e886615a81f9755","sha512":"f26aa197cfdeab9ef5f384c7b268f9ccc2fc267b6876320643ab49c26a0108724e3adced42ca5b7487d83e3181f8c75fef083df79b6ccd2df21ee71f73e03002","ssdeep":"384:rv086jFRqFDbF7LGFrFxFPFOv/IB01ZMFUFN/S4txL+ggx/0J9kIq:ijFRqFxLGFrFxFPFOv/IB01ZMFUFNqOk","tlshash":"b892129276711519201f891c23da8b74637cc0a3944bcdb97efb9429cf854cc67eaa8f","first_seen":"2025-06-29T22:21:13.933018Z","last_seen":"2026-06-23T18:41:05.879404Z","times_seen":27,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/jquery-3.4.1.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.981Z","timestamp":1782239959981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"15851-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BURdyaxgDjthI4H0d6dsHiAOsWw8vdx%2BOTOgiCOQKQV67Umm%2B%2F8jnzQ9BJf0GotUwkmcg4SCAoqMjVguH8mkG8aTfcnJuzwhrpBXZXuxMc3LhpzvcspPmeOUklnDknMmEUzfX8Y%3D\"}]}\r\ncontent-length: 30679\r\ncf-ray: a1059d65eb2b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":31439,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-06-23T20:17:05.907974Z","times_seen":7157,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/client.jpg","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.010Z","timestamp":1782239960010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/client.jpg HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:57 GMT\r\netag: \"4fe6-639f5f137ca40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPwEckhK%2B1ouA%2BkrWWWmnGQZuTsHYOvZQooArRUSkbXbp8UtbL9IIU9D6eTdqIS%2F0%2FH768A0%2B%2BWzki3lf4kGoM6DV8Hp2JZwfcCcTOPXvF%2Bh9uBRMOh2bDsX5QDdjWbghD0dKk0%3D\"}]}\r\ncontent-length: 20454\r\ncf-ray: a1059d661b3c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20454,"size_decoded":21161,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 225x225, components 3","md5":"8e6e3894bedbd1f9e50cf10c95c8ff7c","sha1":"61e8eda7d3d055043a98a77dc0522af862da239c","sha256":"de4c7c840997a4a9f706ff00dee96d1e3dad1b7cd77409205aa3d13c713c1bcf","sha512":"cd8d7c26fc28a8806a9b02140ee8a68ac56200e84a7490a7bbdc18fc430a1c299585a6068b8a8b7b40ff2e46999e89cef02573b79cdefc3e159016da452c683d","ssdeep":"384:ygSTUmTkJi14GAmv10F0ZWbQOSQlHiv10CidCComeeXR:CUmhyG1v0MOblC+XQCZxR","tlshash":"2092e1f2391859f133e0bcbbfa514db4bbe62200f4e74aec49d65e90c8047108ead065","first_seen":"2025-06-29T22:21:13.933884Z","last_seen":"2026-06-23T18:41:05.890026Z","times_seen":24,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.421Z","timestamp":1782239960421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 25 Jun 2026 18:39:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRSoZ4dLiMCLFIJcqDNqjPfZG8vtDUZgf%2FSJ6%2FtJUoy7%2FZOYwqycyBdgPy2Hj6rXZs8fY5x4%2FEKbBL8x85WTO4q%2BddErTBP0laJp1lWWUdJbP0WKP7laIKRHInH12Kqi11xCVSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\nserver: cloudflare\r\ncf-ray: a1059d68ab7456bd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-23T22:14:25.204936Z","times_seen":376618,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.581Z","timestamp":1782239960581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 25 Jun 2026 18:39:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tn8ApvNtBGJBZF1dV1MWCbh7kw%2BvfCR%2Bl5LzuhS2LvFqz%2FOgtlqQq6957YfmXWgqHCxtxbQb3GCcbTSzNU989HSAhr0WnpkIVa%2Fo5sKV2PuBi5ud3GgqxSVCYvmYbkEMeJ4rW8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\nserver: cloudflare\r\ncf-ray: a1059d69ab9d56bd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-23T22:14:25.204936Z","times_seen":376618,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/css/responsive.css","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.976Z","timestamp":1782239959976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:46 GMT\r\netag: \"8df-639f5f08ff180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6cOSdNHe8OKNRyDDbNBzT9LVPUYcsXlTaMG4JK5p33aaYiwE%2Fs6Dev3eWk5N8VxkZP3p8J6iafRgStb9ccAgWJCG%2FrJrtAydEvL6ny745bwWLBh4veX52tUc9dxnduR4LiDkBs%3D\"}]}\r\ncontent-length: 629\r\ncf-ray: a1059d65db2956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2271,"size_decoded":1376,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"55ac07dc1a95e8921743e372b5a82c96","sha1":"13f843551a4f0969a36ec9266ca6872cd50978d8","sha256":"d25f412fd0f9ebaa91952217e2ef730b3ebe516bd91eb9d088c32bc1e9043d82","sha512":"50cd364d01f872d521dd01577a7ae3cdd8a6442b37a9839b4c4948d9cbee3e6e19982e563d5f0c806d22c09715750a263c18dd703536302a99f0986874a4bc7e","ssdeep":"","tlshash":"65414601b502281d60b3b37a9bf78518e7e25477d20b65a278f2e084cfb819142aedce","first_seen":"2025-01-08T03:45:37.362223Z","last_seen":"2026-06-23T18:41:05.886581Z","times_seen":30,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/s2.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.999Z","timestamp":1782239959999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/s2.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:58 GMT\r\netag: \"1b32-639f5f1470c80\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BQtSiZZUCpjZ6K6gWcowS4LFlL%2FHlPoleXWaNgRvV2%2Bqh49Na%2FqmIMUA2l4ePywzgPhGAMDstxLFkBVq9UuFhFud%2FI6sCXDEfvxky4w5HMMw5FM8i%2BtH40%2BsIzMI5%2FWeZ8AWhw%3D\"}]}\r\ncontent-length: 6962\r\ncf-ray: a1059d65fb3356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6962,"size_decoded":7669,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"444e4dcd01a572094ca4b39307c25b69","sha1":"d2c1f6f0fe3bd446c57d7437e60d11878bc18733","sha256":"20ec7a83755dad5f29ca4242ec1840a820eb9593b98102163108189068d5c2e5","sha512":"53724aa2b6a8b5a3d47bd9d97fff1156c307c509a4d7a0d3958de23afb8eb610e47492350764918c89b5be67e1840d5775434e28c274237a8246ba1a0f5c1e7e","ssdeep":"192:+k38eBo8qm47AX/wBq8RAHKIsslub02uxVxm:hbo8UuqqgCKocf1","tlshash":"aee1aee1ea421d9f881c05570e9f96b0bc1b654da90f89d265830a8d4fc18ec1af4b67","first_seen":"2025-06-29T22:21:13.935777Z","last_seen":"2026-06-23T18:41:05.900303Z","times_seen":29,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/nav-bullet.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.011Z","timestamp":1782239960011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/nav-bullet.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:54 GMT\r\netag: \"3b63-639f5f10a0380\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEaCWJDI7WTxWckp%2F7Mry45deadhuksW%2BZHRgI1fXbBqiaDiQ25SNshnYTakUObB5t6ID%2F%2B%2Fp0ceSamhRXMY2cRCGzcOdkK8DVyWH9zf8klMnVbYx5UC%2FZjf8EYH5sp4Kcsvz70%3D\"}]}\r\ncontent-length: 15203\r\ncf-ray: a1059d661b3d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15203,"size_decoded":15907,"mime_type":"image/png","magic":"PNG image data, 14 x 13, 8-bit/color RGBA, non-interlaced","md5":"350c473421023a4339035c167fa4cecd","sha1":"aa3f44bc6b7b92361e854bb4282ac1b06ad90038","sha256":"aa6754f2eb2fcf68311e212a045a5018b7c8d148a4af300acdc9718ad9f3426a","sha512":"9d3ce73aa79594de361dd468fbfe49135510fc12811cc50b6adab29451ffdbabf6bea3f13f0e31123eb912794fcb4147df10cc75c000acc9f534e8515d0fd3cc","ssdeep":"48:1/6uu+k29W8sEvnPRn+xN+Y9YWBC7yPFLXyGsc5297IklZiAK:1SUkEWRYPRn+xNXFPwGsc5Q97iAK","tlshash":"a16282a4fcf27161a54d95322dd82046dc730b83da819c45face8c679f10bed8c6f286","first_seen":"2025-06-29T22:21:13.924747Z","last_seen":"2026-06-23T18:41:05.902821Z","times_seen":29,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.232Z","timestamp":1782239960232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crv-curve-swap.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 18 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462102\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-23T22:15:52.803653Z","times_seen":199064,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":13,"connect":37,"send":0,"wait":25,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.777Z","timestamp":1782239960777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSTl1FCt0FjyM6boKXmp8HuMJBTrw%2BNa73TwrwqXx9IO4YRQPDVAqxO%2BjCn4KCUIcP0ARHlCcuQnps7lqgxR9oy6wHMdpjNet3HHEFJv48LxPqQnD%2BbCMZvq7Xnfk0Z8Z56gYqw%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1059d6adbd756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":94413,"size_decoded":8417,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (563), with CRLF, LF line terminators","md5":"4a73544fdd220992528b8b1a74f1d9f4","sha1":"3afb4b68e2d4bd3002e4fe6cc3f31cd51140ae1e","sha256":"60ce6c3ae580e2eea9055484d292d5ff6e62dec633ee3f049e78c412889ce3d9","sha512":"04590c9c79e98e1413803fce5b656327bac5088da125c23a1f4028ee1edfeb1f02221a1991759908b9d92aab423e82c296523bc8397dbfca2a4ac3cda5c46c56","ssdeep":"1536:rswe53ncxIIhsswe53ncxIIhFswe53ncxIIhz:QwzIIhlwzIIhKwzIIhz","tlshash":"f593313225912d7b09b341f9a121678bf7a5c342e703521432ff638f9ff1e0a96a7646","first_seen":"2026-06-23T16:15:28.564708Z","last_seen":"2026-06-23T18:41:05.896446Z","times_seen":5,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/favicon.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:21.176Z","timestamp":1782239961176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:21 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 06 May 2026 14:12:15 GMT\r\netag: \"1dc-65126c035f62e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8SSEQrHL6o3srcllEMUzsJTNNNRM2DWc1I%2BraMyiS7giUjMx4YhvQJL8vwHPKDKeCBn1WVfRLJEZqvIxFChqsZcOHrVSZCmjF2WsFDhcAKzKUDbgMzfIqAizlMT8ZGZUzMV%2FfY%3D\"}]}\r\ncontent-length: 476\r\ncf-ray: a1059d6d5c3956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476,"size_decoded":1172,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"9251c591d3e8141cb3a15f4c16e9a14c","sha1":"ce2c2e439c6fe9824ab44c22eadd55dc75b9e0d1","sha256":"8a30461875ac595f41463931466bb357b67f0fedad7cfea237de1b0d57ce364a","sha512":"7d1179e993e969400a213c37500648e9dc34ce0cc5f4b2bc9636d4e998e4c863065d72b3b3d6880b20de5b0572259df9c9fb82684cbeb08f12a87a80bf8237fe","ssdeep":"","tlshash":"a0f00eefa342867ce906d524289b01f0c3fde21f6a8008060611cb548f0e8288274141","first_seen":"2026-06-23T16:15:28.549684Z","last_seen":"2026-06-23T18:41:05.88739Z","times_seen":5,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/bootstrap.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.516Z","timestamp":1782239960516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/bootstrap.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"2162b-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2F%2FQox%2FOVSUx4VIG0I40HOUd66FebhuOYZkYvvZVsuJ%2BFgFxlLIvLAm9ew6qZmOgQtucJNsihvvz%2BgxwYyNHDY0jpJaLVRCe4nScVI52%2FG1hLdJYu22br0IgqMZVNWAvXDGq3hQ%3D\"}]}\r\ncontent-length: 25429\r\ncf-ray: a1059d693b8d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136747,"size_decoded":26202,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (328)","md5":"1d4f8d0f7ba25142cf1eabfcf2e21286","sha1":"4ea41fdcfac2eb71034e85d36ae6a19bd894c442","sha256":"c670cfe1d636455a63f09f7bc73c696e26f7c490dc8bf2ebf431d12d41290cf0","sha512":"733034d28de1e20e92100bda686b8c95d9a61631ee5fc0e0d2ec991fc9a266e6a00282d5aa6bb794d4b5a4e48b4d613b50d15d1f84aa238766e6d3d8da658bc8","ssdeep":"1536:tvMGhlDUiDuvlkC5u71LK/x+m5uDEqFmd4NAj:t9UiOlkan5cEqFTNA","tlshash":"b2d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","first_seen":"2023-03-10T09:28:54Z","last_seen":"2026-06-23T18:41:05.880692Z","times_seen":93,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/custom.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.552Z","timestamp":1782239960552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"3e3-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByAaMf6MM0nXn3x3ZkCvxzGvM%2BzBVkaign0hJ7HdRfL6qT6P6qyi3XD%2BF5sAOIdHHrkr2oDtB%2FLDMPMhg7uPGvqAjE2tjJKnlFe507mHzkXltkh9yyCvp7qMjFgkoWA1E1j654w%3D\"}]}\r\ncontent-length: 456\r\ncf-ray: a1059d697b9856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":1221,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5f82e85eaaf83eebef15f84db196952a","sha1":"baee1ddefac79add72fe6be4b6cf5e1adcd765a8","sha256":"c326974e5e3d38f5785378449883b3363bc1e2920865ba970a36f358c52feb49","sha512":"99b6d9e5020f6503c3d197898361e4c2e5708a4964bca2f4dea7e3621e070fdf72a081c1859ed90d2736c9d35484edbd270afd7c916d02652b704daf98112b9a","ssdeep":"","tlshash":"8811c20661282135cc7f73665ab45209ffba431fa40286237dfc43801f3b5999299ecb","first_seen":"2025-06-29T22:21:13.937737Z","last_seen":"2026-06-23T18:41:05.885378Z","times_seen":34,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/s3.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.001Z","timestamp":1782239960001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/s3.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:59 GMT\r\netag: \"1339-639f5f1564ec0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9NlocZX8%2FpJmPoKqbbcFRph6M4eKypYruV79He2Ns%2FuOaZrJNNxNrkUtK9%2F05Knge7qWtuvgOhVNOeZRy2lXMw4mmzjqB5H5YfYHRSgPwM9Uufe83FIIz2WTB1JjMxBpwpvHFc%3D\"}]}\r\ncontent-length: 4921\r\ncf-ray: a1059d660b3656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4921,"size_decoded":5620,"mime_type":"image/png","magic":"PNG image data, 198 x 200, 8-bit colormap, non-interlaced","md5":"00a9790c73d3b7a7a5f11d1875826fb1","sha1":"c82ef4cd4833af043c36aafa01c8fda0e44463a1","sha256":"6e417758eac88f8dea42194154f5aa35fc5fa9f7a03247f70712e46b23856771","sha512":"b8483053d300cfce6b1464480e792cb663dbd960310ef56b03aef08b9b672802646a91cac11f9bbbb102234e430617e2be341b835cceffa4aa90decce5d3ee06","ssdeep":"96:Imbg8b/nACfEzF8FbUOHYFs43Dll98qDS1HGnIJhTM:1bxbcxTFsAD39921H66Y","tlshash":"5ba14c5bb7c5d09c4296355fb9d240a5bdbbcc7b16a426c53c59ff1cc27e220c586113","first_seen":"2025-06-29T22:21:13.924045Z","last_seen":"2026-06-23T18:41:05.90217Z","times_seen":27,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/s6.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.006Z","timestamp":1782239960006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/s6.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:57 GMT\r\netag: \"f16-639f5f137ca40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DimUfjYQSZEikwrCpgufMhhdt8x8OKyB%2F9TguYMIBKq8imzACYAIzY1o3IQvH9WLYyW31wCi4Oz1j5JvMknEzqLm8dtsDKkSf9Z9b6OPvl86ljBYOCUKKluG%2BND9xWx2jubn%2ByE%3D\"}]}\r\ncontent-length: 3862\r\ncf-ray: a1059d660b3956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3862,"size_decoded":4558,"mime_type":"image/png","magic":"PNG image data, 200 x 168, 8-bit colormap, non-interlaced","md5":"8e785e37b4f56852db60e43c10006896","sha1":"fc09fc08de26c61fff8f550837169e98e27dc994","sha256":"745fdfc025534e01fc693da03bb9a8d4bdf737d8e8f7d0c5a27d5832dc6c6888","sha512":"1f37bf885a3793eda81b28e2c39d85408a1755dc3e425b8e3e371f3c5326908ea0afba20ca0e4ae7c0fdd22b201e32819abe44c8b35b4dcb9a0b3f91c2769b07","ssdeep":"","tlshash":"f3813ce749059de0dbf53fd3a066039411f79f1e4a151a41e47474db2d722ea4de7210","first_seen":"2025-06-29T22:21:13.921616Z","last_seen":"2026-06-23T18:41:05.900872Z","times_seen":27,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/server-img.jpg","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.009Z","timestamp":1782239960009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/server-img.jpg HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:19:02 GMT\r\netag: \"15a08-639f5f1841580\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHk%2BHnltCuGKz3Sa%2Byg31F4JAOUAxnz61TFC0ulVYT396uU%2BMv8QQ3Okd%2Bkq63kgFS2HOH8rEpn7LtT8gSyx2yyWBeDku9UTDAhToHMtKBDSfrVCqK6wEWuRiTCaL5ShDLo%2FObw%3D\"}]}\r\ncontent-length: 88584\r\ncf-ray: a1059d660b3b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88584,"size_decoded":89288,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3","md5":"febb43a63de3d5cd5b506994863e679c","sha1":"2c8568333cc864a7dde0cc52ff277be18e96650e","sha256":"86e7ff01e86df2facff8fc4255412125e13dbf908725b3fe87e0f8091d00d068","sha512":"1385836629ebd347767c0a69aa7bcd4ad2247b31e222a4af4441aaa39d4a3e4dba4f993a03eda27cb3def7c88ffe75b998be7d4bd872aa0212d2f8c9715b72e7","ssdeep":"1536:X6J8VWZ9mez7SuYbv9qiTTOVjXKFcGBrwaE8NriWCnYG5vnRWSX2iV:X6SQZ4efSbbAiWVjaeQENWCYGxIiV","tlshash":"9d83cead033a154ae0cf2d91d47857d26b331392d20fa2b9f252e6db66733923366c5c","first_seen":"2025-06-29T22:21:13.929252Z","last_seen":"2026-06-23T18:41:05.901519Z","times_seen":24,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.242Z","timestamp":1782239960242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:50 GMT\r\netag: \"12d68-639f5f0ccfa80\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faloepEAiyS6shYLT3LoDhggBoP9qDBmzhGyLGM9048rgKakdMaYKjykodyoz7YCyUwvTvhbIzq7Q5kZLLzGh8fNPcRqumCS47DbKbzyKIPxhoeV5Ad0XfOkwZtNdvMH4IoG1GU%3D\"}]}\r\ncontent-length: 77160\r\ncf-ray: a1059d678b5756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":77857,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-23T22:14:28.711291Z","times_seen":501239,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.548Z","timestamp":1782239960548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHjOpKdlCUO59SnPcakR90abBRTUlj6NqjNIAT7wGkT39R2vIUzw%2Bup2%2BSm417M1zGW7TZACqjqqzea9kID2bGTct846jx7Vkj3CXyB6vJc4TD9%2FIUQSI77FxGHnI4Nvk9C%2FHsc%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1059d697b9656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":94413,"size_decoded":8419,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (563), with CRLF, LF line terminators","md5":"4a73544fdd220992528b8b1a74f1d9f4","sha1":"3afb4b68e2d4bd3002e4fe6cc3f31cd51140ae1e","sha256":"60ce6c3ae580e2eea9055484d292d5ff6e62dec633ee3f049e78c412889ce3d9","sha512":"04590c9c79e98e1413803fce5b656327bac5088da125c23a1f4028ee1edfeb1f02221a1991759908b9d92aab423e82c296523bc8397dbfca2a4ac3cda5c46c56","ssdeep":"1536:rswe53ncxIIhsswe53ncxIIhFswe53ncxIIhz:QwzIIhlwzIIhKwzIIhz","tlshash":"f593313225912d7b09b341f9a121678bf7a5c342e703521432ff638f9ff1e0a96a7646","first_seen":"2026-06-23T16:15:28.564708Z","last_seen":"2026-06-23T18:41:05.896446Z","times_seen":5,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/custom.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.987Z","timestamp":1782239959987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"3e3-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGT9I4C5rbLAC4pvn4fL%2FWytAE4txnMj8UQ3r%2F0P1u5yh3sLtg%2Bc8wHVdIkchOOUSQwHlTJUkVmyMiciCPOx3vqRKktPeCZE6lF00wucPnS8tOLaEwjV6XZnmQYrkfXUvrbKFOg%3D\"}]}\r\ncontent-length: 456\r\ncf-ray: a1059d65eb2e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":1212,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5f82e85eaaf83eebef15f84db196952a","sha1":"baee1ddefac79add72fe6be4b6cf5e1adcd765a8","sha256":"c326974e5e3d38f5785378449883b3363bc1e2920865ba970a36f358c52feb49","sha512":"99b6d9e5020f6503c3d197898361e4c2e5708a4964bca2f4dea7e3621e070fdf72a081c1859ed90d2736c9d35484edbd270afd7c916d02652b704daf98112b9a","ssdeep":"","tlshash":"8811c20661282135cc7f73665ab45209ffba431fa40286237dfc43801f3b5999299ecb","first_seen":"2025-06-29T22:21:13.937737Z","last_seen":"2026-06-23T18:41:05.885378Z","times_seen":34,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/images/s5.png","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.004Z","timestamp":1782239960004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /images/s5.png HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:55 GMT\r\netag: \"fba-639f5f11945c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3blMY%2Fudqp%2FtzVKQ9be%2FmwQWpBH2hl3njvR4vIyi6oa5YYDeUpY4hJzMR5nMzFyHWTPRD0rDJQy67GQ%2FqrWuJO9n4g6VEQgR%2BMTjDAOU%2FcXL3HLzdCpzA5krOnefxqcOxozh6g%3D\"}]}\r\ncontent-length: 4026\r\ncf-ray: a1059d660b3856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4026,"size_decoded":4728,"mime_type":"image/png","magic":"PNG image data, 175 x 175, 8-bit colormap, non-interlaced","md5":"8cc0305c698e3c6df0551942c23d6cd9","sha1":"e7807679dbdef3d8f3585182538f1a62573ec26a","sha256":"58b2d6b930e71359ecb16363f422cd2e3445f85f9cdc05cac2ce4d289f5ea286","sha512":"62d3fcc5835c70902ccc2c5612d55e6262d785d77492f6b8dfb9e5c191bfe76b4d52ef2ee58c04d229d037d19274c390e3e3834578a33814b79790346796e204","ssdeep":"","tlshash":"5f817faa0481a1cd80f71f0c855329a71f2d5d9d1a7575ff0a04f7205d7826442d3c88","first_seen":"2025-06-29T22:21:13.936544Z","last_seen":"2026-06-23T18:41:05.889154Z","times_seen":29,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/jquery-3.4.1.min.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.477Z","timestamp":1782239960477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"15851-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ceE%2BBEsaXqkszloQ3pmk9FTi8%2FERHm6ugOcEF9zBU%2BT4VfTux%2FsA7GQ6Ckqhr2UPZT6g4dc1V4k0BfOg85TReSEPRcP5eKARVRDl0ZM0Mu%2FveTh9x2pmJyYeeyUfFrBuaiy3deU%3D\"}]}\r\ncontent-length: 30679\r\ncf-ray: a1059d68fb8656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":31450,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-06-23T20:17:05.907974Z","times_seen":7157,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/js/custom.js","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.780Z","timestamp":1782239960780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 15 Jul 2025 11:19:05 GMT\r\netag: \"3e3-639f5f1b1dc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyuqRA5DJZ4%2ByFtmnX1zuGMh%2Be1BWLH4yBkdnIb9WIitvAmGH7Kf45drirufeFwZq8BLWfa29JTXD0ccyqPFqLADI274GWza4DkOemCD6olysgxtwB5QleB%2FJfs1sIG8zU0Gpns%3D\"}]}\r\ncontent-length: 456\r\ncf-ray: a1059d6aebd856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":1219,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5f82e85eaaf83eebef15f84db196952a","sha1":"baee1ddefac79add72fe6be4b6cf5e1adcd765a8","sha256":"c326974e5e3d38f5785378449883b3363bc1e2920865ba970a36f358c52feb49","sha512":"99b6d9e5020f6503c3d197898361e4c2e5708a4964bca2f4dea7e3621e070fdf72a081c1859ed90d2736c9d35484edbd270afd7c916d02652b704daf98112b9a","ssdeep":"","tlshash":"8811c20661282135cc7f73665ab45209ffba431fa40286237dfc43801f3b5999299ecb","first_seen":"2025-06-29T22:21:13.937737Z","last_seen":"2026-06-23T18:41:05.885378Z","times_seen":34,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leostop.com/tracking/tracking.js?_=1782239960702","fqdn":"leostop.com","domain":"leostop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:20.866Z","timestamp":1782239960866,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tracking/tracking.js?_=1782239960702 HTTP/1.1\r\nHost: leostop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-23T22:14:30.23529Z","times_seen":16663220,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"leostop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T18:39:19.198Z","timestamp":1782239959198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 23 Jun 2026 18:39:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bGf3WsTW%2BqKWQ%2BzC6gHbBrTYU8uQJLPCOoCncI0t%2BMc1pVomflLeEUgCl90RRh5g2ZbqjjseySoycTCFiWEJ0tXwjYyK1jQdt%2BDlk4co4p2BPuqwqlR7eNlEeQxGT9GsU1DaYM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1059d61392f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95001,"size_decoded":8574,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (563), with CRLF, LF line terminators","md5":"cc2eaabfdfd0cff202a0e92f50f9296e","sha1":"38da22a6e4c93e5f0729fa73eb790a59cce4cc0d","sha256":"68d80d5a635821b68f258676e76c892fe6f7137490594638e1ebae63ccdebddb","sha512":"d98d878591eae7fecee10f8b1f53f1fa74a059122dfd802fc9259d68603d6140ec2262398c9bbf6ab29a3584371da3bb63eb6f30a758acb12d98f6fffe8ee85d","ssdeep":"1536:rswe53ncxIIgQswe53ncxIIsBswe53ncxIIJX:QwzIIgZwzIIs2wzIIJX","tlshash":"3993213225912d7b09b341f9a121678bf7a5c342e703521432ff638f9ff1e0a96a7646","first_seen":"2026-06-23T18:39:56.929245Z","last_seen":"2026-06-23T18:39:56.929245Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":114,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crv-curve-swap.org/css/font-awesome.min.css","fqdn":"crv-curve-swap.org","domain":"crv-curve-swap.org","tld":"org"},"ip":{"addr":"172.67.177.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crv-curve-swap.org/","date":"2026-06-23T18:39:19.971Z","timestamp":1782239959971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crv-curve-swap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 04:21:33 GMT","end":"Sun, 23 Aug 2026 03:43:28 GMT"},"fingerprint":{"sha1":"E5:94:DB:90:71:B6:89:81:AC:18:B6:B3:BF:0D:6B:1C:11:90:DD:47","sha256":"AA:80:99:8A:C6:A5:0E:2B:A0:10:E6:C4:34:F1:DC:77:9D:0B:72:5C:68:32:CB:4C:44:0E:FD:58:BF:AE:4A:BA"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: crv-curve-swap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crv-curve-swap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 23 Jun 2026 18:39:20 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 15 Jul 2025 11:18:47 GMT\r\netag: \"7918-639f5f09f33c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOsO8WkhStLBk7c7Y8C2x3mJ0YL%2F0fmvVDW1lYuV6EfWRpA7v0AWUB2jGRTI2NgHq7ddGzQf04Ha%2FxINVw8%2ByJlSt6X0ByVpe7lT7UAKKLYfnmv7vTeIUnbCId5c3jRBApPeC0U%3D\"}]}\r\ncontent-length: 7053\r\ncf-ray: a1059d65db2756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":7804,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-23T22:13:14.049194Z","times_seen":289473,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"crv-curve-swap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}