{"report_id":"bfa231f4-69d4-4a48-899f-a8e6d1cf43e7","version":6,"status":"done","tags":[],"date":"2026-03-26T21:16:52Z","url":{"schema":"http","addr":"btc-swap-no-kyc.exchange","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"172.67.198.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"title":"Change BTC to XMR, USDT, ETH, LTC, SOL No KYC Crypto Swap","dom":{"size":48183,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (383)","md5":"26c11fd05b3e5bff602720840b607d9e","sha1":"52e81df68169ceb82002c1a450ac6e2ee2635bc5","sha256":"900a704a94dfd97caf4726b5f7756bc483de8ea85867b6780bc01ae5f98b0ebf","sha512":"f176fd5a0a997cf3b779b05a45b439a912be5e260867ec845428627b825c2aa3117ea5d845abe3a9084eb48c93d82c709b236dca5588749a4e3cc07ea6a2009b","ssdeep":"768:99HXvPmAhqHVuxHXvPmAhqHVuDxioTL9e0UcpfM:99HLH51T80lM","tlshash":"2023301930fe59b704bb96e569930e023e94e303e01915927ead0af85fc7c65fc77688","dom_hash":"domhashed3a48a25721e5e07fa26723100c1f61","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btc-swap-no-kyc.exchange","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"172.67.198.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T21:16:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"btc-swap-no-kyc.exchange","ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-26T21:16:28.248188Z","last_seen":"2026-03-26T21:16:45.832876Z","alert_count":108,"request_count":54,"received_data":294065,"sent_data":27147,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1692,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0a2bf188de49b6270f92d8563c2fdbe","sha1":"fa083f1fe8f261ceba66aa24cb2a5d96dc3d44e6","sha256":"3418bec180787cf6ee6b9afe2a43e0925a5480e69ad9720c698e446e85101475","sha512":"0e781fc421483b4d68c581d9e4d45b558254c5be924ce4c8c601289eca298a231af020616eff282794a6c16a3884b14efdf2cb913c3dd25c3809a5e5d81ae110","ssdeep":"192:n+tKuIjQwcdAOatSzdFedsBC8B9CKYqk6cdYyqsVscYbvW+lhfga3FTXPvmVEbdr:n+tKZLOZBn9Q/6Z1fbv1hNFbPOVEx/NB","tlshash":"3d1294aa32bb7a300abb66ff2edb56697464405b3800d9843abc41100fd0f95ed77dd6","size":9617,"data":"","first_seen":"2026-03-09T13:48:49.35552Z","last_seen":"2026-05-07T01:34:08.521442Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/dash.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/dash.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BPY2N31fQQOUVCWFrRjFQUgRxbo4IllRCmLp3WXlm8XPIh5Wh1QvZqmpOmzl4qt0eywcLc50bZapSBFQkbdq6F4nzHATiQXxgjd48dILnbHp0%2FfbZ6gH26GejsUKe8rJw4Gj8GHp0F5WD0%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"26d-64df058521c8c\"\r\ncf-ray: 9e292d48588e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94b9ae90fc721072b5f8199a6ab9a747","sha1":"7155ad4c23b1f03550d3c3ff9866ad0e6a3f67e8","sha256":"307cd15ae12153f9c4440063dc5e53d44c1dafabe2c015c599cb97a179d7e7a0","sha512":"70a1aea23f3140f4b6cd9f8e6abb14f2f92df85a25af947d52358be2c1b2891aca438ad79930521becc98ffe80765d854e77bd88aba4052e5ebbcd14fc9ffe59","ssdeep":"","tlshash":"71f0dd6f82498f3abe1382b65a98284520fdb4e850a0d0a870e2701fd0488f45970593","first_seen":"2023-05-09T12:11:59Z","last_seen":"2026-05-07T01:34:08.507917Z","times_seen":500,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdtarb.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdtarb.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:44 GMT\r\netag: W/\"865-64df05a6a6dd8\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2B%2F%2F%2BlmbpYU1HPcogBwyUMiqRsZt7X9U3cybK%2B6y%2BuUsfDyzdSnt9f4%2FNUQmokXjbwmhseClVlHt20b%2FpsVYeP%2BEwhCpjMpcT2QVmyaXHAnxXetc1%2F8X6K8F6FHpWMRGjK8lfF6dQkW%2BKXA%3D\"}]}\r\ncf-ray: 9e292d4868968deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d70c261908a7bd2cde182a6a477850be","sha1":"d587b777974afb3eb63009d8d06cd27f962acc5b","sha256":"fced8c4a47899704bd2606b577df5f893abafc9ad4625d91cbdc3f4deb13aede","sha512":"1c37f056407c887510b202b57af8d6007c66c2358dfa1fee7d64cd62e23aa0ac957f4b77b4490fd8e9655132307f0d572f60a7a5f48c30046bba3a0660df0ff5","ssdeep":"","tlshash":"744110b5a75a45fc0d0b4bb8ab3494b0671f187eb35b02342d5fa3f0a1074edd9938a4","first_seen":"2025-08-08T03:14:58.088751Z","last_seen":"2026-05-07T01:34:08.474444Z","times_seen":483,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdtton.png","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdtton.png HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 35528\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:51 GMT\r\netag: \"8ac8-64df05acf36b4\"\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrCyHrHUTEgOyLncKhF9cRReQODwmL2WbmxezobQRO2l4r5LDx2F6TF1bCou2K2WDKqYEDtV%2BKvHC%2FGXouXsYtunXjEZf6AEWUSQtcsCboi7d6yt1XSIDs7MaFMBtrXk54HCruoOyDG7u1M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e292d4868988deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"31e889c88c60a941fbbae1853dbf5a9e","sha1":"a8152e08885bb744822697063188366158b9c069","sha256":"0ea77264a2518023316f8bb8ab2a5fdeffbe9d687558e96cbc799a75caa07533","sha512":"8311df33378ac3dc0ed885dfcca144f29a99481abf4b53942ceed48a31971dfbcbc5ca6fd0aeb0d7c70e62d56cefdc571f0d3ec1309c8c4b2aa593bb89a93218","ssdeep":"768:0akjq7Du7AnW7uFlu+u4QOOqdDdVpiDSP+9hFsQ++DhhPonv+yxKi:f+q7K+zF8H4QO/ldHi2P+bFseNmv+YV","tlshash":"b4f2d04045590f8ade66e0387a687efc7f72231f811a7798932fd689235a3f39069b41","first_seen":"2025-08-08T03:14:58.247261Z","last_seen":"2026-05-07T01:34:08.518762Z","times_seen":484,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdc.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdc.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:33 GMT\r\netag: W/\"6a0-64df059c6d6d0\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ga1j5CSTO6Q2oe8qFzh%2F0RJ78LkT3MBvy4uCzxKtBTGhw5UI8HQjWHxpC8DC%2BRgJ4w4SFRmxYuRpA%2F5bBOjPBfgSTm1ouqpIdNsQsMxuGUUZ4GcH%2BdlNLxQlR4f3PMMnUAFsw50vEKKfrdY%3D\"}]}\r\ncf-ray: 9e292d4878a28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b5972c16a9795dcf6e2e2d7e3125d21","sha1":"9b1cbfda8bd93368b67de6e9aba62fd250bfc7ee","sha256":"913adf09fc3097cfee7f76a3226bacd52237f2ac714817d68eaf73bfc3a72109","sha512":"c271a0fcc19d8a62481e3c72dc679186d89f28b642fd5322b3e66250d4d63e549b6a468cb407ded0d92b5786e0e1fd3b99cc218da873133d2ab80f6af03fb791","ssdeep":"","tlshash":"d7312918eb950a399848c393ada42fa53a0f73bdb114c2fc94b45e30b935c9cdde508a","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-05-11T16:10:16.009637Z","times_seen":689,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/wbtc.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/wbtc.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:53 GMT\r\netag: W/\"696-64df05af56813\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2B6loE576RcClmNViL0silnl%2FJD0FNln%2FD8fQQ%2FeKUFQ0ZJKg6ml1esUZzwUF%2Bpmz8VeazMgqKdzrta6z80ns6pE4h4adVd95j5k%2Bz4iy%2FxnUdRGMuMdGqxQHfpzSR9KOGo3I826WdrFaYc%3D\"}]}\r\ncf-ray: 9e292d4888a68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec1996e5df275212861eb647fec114ba","sha1":"a1e21bb75e8c7e33c054c29146dfeaed577d0d6b","sha256":"7af7a4b20040df46c98ef79ee867f3e429f01a87c9d4f2a62cf0d7c56814974b","sha512":"cfa333737e008e56e417e6593cdf823f5032dab29aaeb1d23ef62bec9784988599519adfda0861d4f0280ca6e1d53a37569b3a132a30885e2e4232548285b18b","ssdeep":"","tlshash":"8e3132b7436d1cf2ac038ba676e0d42374f164fee258c9ec77eb21774406a762a24831","first_seen":"2025-08-08T03:14:58.291829Z","last_seen":"2026-05-07T01:34:08.495565Z","times_seen":483,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdtsol.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdtsol.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:48 GMT\r\netag: W/\"919-64df05aa0d3ab\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvTPeGL250Mk07ID5gox1%2FLJDB%2Fg7mPkLm1fc2p8mrNNwlMRz%2B%2Bhj2akcLR2ge%2Bn7w8Jo4FM6JM%2Fof5Wo4Ev0%2Flz6EHX5KF0NdBDyfSRXBnutNEexz%2BFr%2BR%2FhzPizrh6fPmABi2CmqG0bJo%3D\"}]}\r\ncf-ray: 9e292d4868958deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64346595d18c63284443047e061af26d","sha1":"4cf0e95a278cceb2f92b1b872225c28822d8810f","sha256":"14c6fe294604e23397d327c03d26d9f9241175b035a5a31dafedb98d8dde1aec","sha512":"4f603cd6fe045ffff816fe139267c0ee7437258f3501bc797fabc1abfa566d09c15a7438dc76fd91cd3ad0388ddcc1f9d18645f33f4ca62378d26e520c87d21a","ssdeep":"","tlshash":"90412052e204d23b8d4f82bdcb7660b42413505c76feb2b892e35b1d70178e5f5089b8","first_seen":"2025-08-08T03:14:58.31984Z","last_seen":"2026-05-07T01:34:08.497809Z","times_seen":484,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/get_rate.php?from=BTC\u0026to=USDT-ERC20","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /get_rate.php?from=BTC\u0026to=USDT-ERC20 HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mBBl0QvddskPFYf1SxAvJyQrnjks%2F92XBYBpYcIxNEBYHmDcTXTlEzXT1YxgE0Jb8Qjl0CYy7krJJdIZ7k81U9HOSjML1ggWbeYLl0uF7VDPsXXKne9hL24ny0oa58y%2FDOha7f2x85UaTtc%3D\"}]}\r\ncf-ray: 9e292d4b79b28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"694941822fa3fd26497647f4c302f7ce","sha1":"99b0ff40cefef94ee79f6c45a26a018e9361ef4d","sha256":"d9108dbb8b6bb900cc40d81af0a3a62879f2845ac63b6b154405e78ab9f06a6b","sha512":"cc4f94fe62a7e7bda008282069cfe6ca0ec29034d74fd90198bf86153885666f526a0c6808430822b21a4e9da1c2b968d20d87c09adbab8985eb1fc3facc5a60","ssdeep":"","tlshash":"ee600008200808208808280a2c008020000208820008000080ba0800a0820800008c00","first_seen":"2026-03-26T21:16:54.266718Z","last_seen":"2026-03-26T21:16:54.266718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/zec.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/zec.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:03:01 GMT\r\netag: W/\"578-64df05b6ce9ea\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPa4Ikx3UMeAnkv%2BL68UrvNCH%2FICq%2BPwKduEqotVnDA0ndrBfzMGTf3DH45TihyTSLdGtgY1f6dCEkDEJIU1gA2vGgcp%2BvLgIpNqdiD5x%2BB2kyas3Sd8K%2FHFPOlRv2soU2%2FlM66hBYwZQyI%3D\"}]}\r\ncf-ray: 9e292d4858908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1400,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0355dfef0156fa1410290c6f62594b18","sha1":"de25f2fc3d8e8417c25e9cacf316b8ab9ae5aa94","sha256":"c202292c36336b109523fff68c5e8de3a659ca2dbea6a7d1e9fdead80c0e1a90","sha512":"0f5db1dd772218a22b21ca44ceb50ab2a85036712ea4a17c7618f6bec7b4b6d198ed3e638158d8497132decdb5402823f3df0699d391c8cd56e6d00fa44ccb94","ssdeep":"","tlshash":"8a211664b3875e39b9b1c394ecd0b89e3029207a90c5415cd555bf5ee495df01c84ad4","first_seen":"2024-08-20T15:05:04.252796Z","last_seen":"2026-05-10T14:50:56.291683Z","times_seen":505,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/daieth.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/daieth.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFap6AoWid%2B0OCNRH5voO5gSCpRtBidm7iHcJp1SmSrTOHR4nej%2B076%2FAWJOb%2FrpRHtFkDLdITJ7JxL3Q3jf1fr4JuuNNR5arjn5t%2Bhe08%2FgZvoPnXqtUVSOIv3Qa7C63Tc3VAnLdHwez1E%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"38a-64df0582b471c\"\r\ncf-ray: 9e292d4878a18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d87ee22969e0aae24f1f110320f3b41d","sha1":"1689674b0c03a65cb2d7276913344f474196b0fc","sha256":"dadf1b43249c6a30982100346e82a7e56b7670e8495aa57627ab1ab257daa266","sha512":"cc55a781434ea99a8d3926946a518e14e059f86e8b79373a93fe66c93bd2be75f0c5cc53c84d97ab9095d7275a7f071b604ae247fbfff3dcaf00819ed36a6c29","ssdeep":"","tlshash":"3911dcf8f570246cde460bf08eae14e0b8992cddcca85652910f31007a9138f50f0aa1","first_seen":"2025-08-08T03:14:58.13591Z","last_seen":"2026-05-07T01:34:08.472246Z","times_seen":483,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btc-swap-no-kyc.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:42 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 414889\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-14T16:56:28.160066Z","times_seen":178346,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":78,"dns":1,"connect":21,"send":0,"wait":18,"receive":5,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/xaut.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/xaut.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:56 GMT\r\netag: W/\"53c-64df05b1c9b42\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z05lchiVmDgsadlkF%2BAKzIUED8RxpS9X6hFXpPpqBAJg9mzldF6LnQJwcimo1NgZAQP%2B2m9c8Cmd3l74677N%2BObeHRt%2BhBJQbkl%2FzzojJuHJg7sCmYtWvR0XV55tb1bKxlrVxnuFz%2FMIw1o%3D\"}]}\r\ncf-ray: 9e292d48588f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"366ffdc65a8d259c1c34081748586241","sha1":"aa10fade865478c4a704092d6b7d0371a515f964","sha256":"5d5581a3457b735d7f5300005c78171bdeea07787786ef3073a0a5f7b8675cd6","sha512":"9b316bbb7c94b5db6ea30533fe53d653dcb163406df9e91eb6b7d4fcee54691f9ed5cc7c503e2c3068e80737882ff0c236b046b7815bff14495efbe2db41b698","ssdeep":"","tlshash":"8c21453bd3199c75e13b8798d684d50b7438796af1c9d2ece6c0771b35314e30954e28","first_seen":"2023-08-12T12:25:11Z","last_seen":"2026-05-07T01:34:08.510915Z","times_seen":496,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdcsol.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdcsol.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:41 GMT\r\netag: W/\"ca9-64df05a3c31df\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYnM4YeADXO6kFGcTdjVKprhctQpvLs7LDAkV7x5DNImH0gDX8MuLay0jc0yMeS69OQKpaX5EeXbMzPfqXdofpdaPQXWPh%2FZ1cJyUC7U1SzF%2FW7dSzJXJds%2Fd4jEFMQwDa4VhnS6DCna%2Fhk%3D\"}]}\r\ncf-ray: 9e292d48689a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d20a02fa42c7ecf717261f06b657429","sha1":"e34f466c2fdfdd7bf4d9cbd21391db8b7452c2f3","sha256":"0414052fd922bb1d9598fb1d8a97114ee7c2ad4093f4f0fb40d3073fdc5fe332","sha512":"6256b6d5cf07d6eab0831ecced5e1adec8019773334115a952d44777d4a68aa2ed7f469d30d4bf13247f15ae18f72aa851568049f4360c2741b47cf81b43ffb0","ssdeep":"","tlshash":"1a616383c2245271cc4d88ac9725752d1656a88b7a708ad0efef5b1ed40e5f2510dad9","first_seen":"2025-08-08T03:14:58.321449Z","last_seen":"2026-05-07T01:34:08.498624Z","times_seen":483,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:16:31.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg; path=/\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aO4GsgHlCVJWBZbuEy1pz7cyQbqJkurAizwdFzNBwt5PCjTP2hG1Pm29ksL8f1PZfb7qJMyR7gNAdICwOx3oOcGY893a%2BLrHVIjYwUKsvKPBSHZlDPvaw7giIGkwN2d8%2F1T64J1rCl7Lws%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e292d462cffb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":48345,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (383)","md5":"4b77b010ab02ce5302f48bc2454a386b","sha1":"35e22edf274449059d3434480a17aa7290222e1b","sha256":"ee5246d327ab912c52bf2bd1a608e451b83517e37f6b317f64b70ac35e520c28","sha512":"d784971c8a3e49c28d90c1453e3f0da2c538c4a6d6196cf3ceca094c3cd2ea1b5e89d7661583f17030f07b533caf314f81de4b0c46aeaa7099baae9bc70bf0af","ssdeep":"768:53ZcWeNTiBE8voZcWeNTiBE8vLxioTL9e0UcpfM:53ZSZB1T80lM","tlshash":"df23311930fe99b704bb96e529930e433e94e303e01915967aad0af84fd7c65f877388","first_seen":"2026-03-26T21:16:54.270356Z","last_seen":"2026-03-26T21:16:54.270356Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":71,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/doge.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/doge.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:10 GMT\r\netag: W/\"df60-64df0586202df\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRGau0vryxU%2FCYoUFnYxdT7y96KP7lHBwp5jODVeBVUVEyV407%2B3kUrrrPGq3VkE1cfC7Sg4F%2BLOEFnpI2YOehqKXMf1oXa1miAycHsQb0tdHLQtxi4WpaFxlrP7k2Pt8JOwCmSsjv4ltYQ%3D\"}]}\r\ncf-ray: 9e292d4818748deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfe942ea1ab1cdd5b24bf66e4764bee1","sha1":"cda102204962596c36af10643a9c7d52f2d27185","sha256":"fd1c5bba25550fb3817560c04c9ec96e9b1a59251249997220a98b8c69cc5cdc","sha512":"7f118456391705644d5bb4c3b668c055f7b145344cde2e4c4e72062c80882c0ddca1d137d5da4f58b9bcf5b70e285e33557e30726449c9a6f0c07529701e80c2","ssdeep":"768:ceNIDXtN03ZpiteAidcLojmW3/tbHH2OZugokMUXzCknYL9bkFyyFWATv:ceNWQAXUme/RdZdok/jdvXz","tlshash":"a3438993d2a817fc79460b24c531706679f555aa723be39ccb67d6827806ef200bcc7a","first_seen":"2023-11-25T21:53:24Z","last_seen":"2026-05-10T14:50:56.314403Z","times_seen":911,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/bnb.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/bnb.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:01:59 GMT\r\netag: W/\"648-64df057b3c15b\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Up8hnrRUvSmXpDEHv2jfjhmHMkQkJ5RoAdMiHTtZWAJUhrQaRPwIAZMBXcgR1%2Bdqy%2FLec9cUYRmZB0CNtSCpvnYfgBnIAx%2FZATSOf4Ct0K%2BoH%2BMIr39h%2F6X4hnkjBEmDdEYrEhTGXjbI6uw%3D\"}]}\r\ncf-ray: 9e292d4808718deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aa88810b9f05826b0ce034c0799f7e6","sha1":"7f7092e9e20565d527a1ceddf7e123a6fa1112ca","sha256":"d068cbf5169368d3e27992d205e7891f2a376908fb6d6f5edbacf11a3f058c61","sha512":"6af3a7895649bb3b8fe912d4921403d91a3f24fa9182a978aa5451ec54bac8608c42ca332bdd48d4f50a3c0dbe22cff883bbcd615c6b2181d32fdd3b7a531ab5","ssdeep":"","tlshash":"46313305c7d4c7a7bc95c7ced6b11542427350e9a23382b4fb0bc531bc2e0aa0a4c6f9","first_seen":"2023-08-06T01:12:06Z","last_seen":"2026-05-12T06:26:42.682899Z","times_seen":707,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/sui.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/sui.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:30 GMT\r\netag: W/\"4bf-64df0598f387d\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSO3hmezlVBPdAfFlPC1bi6fWfTI81CI48oUrmxIZ3iQuvLjlLHCldRNQyllEzK%2BXXUr%2BJffKRE82B4qsF9NOrnYhyIkUgXe3wZexpFNUojsq7iZQ%2FDTAe5rLLgtBIr4Hrrw6ES%2BtQGJyHQ%3D\"}]}\r\ncf-ray: 9e292d4818758deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acd43b38b0d5a1a02bf1484ca78ed1a9","sha1":"ef7e22ce96d9919dc3550d8563bac2b48a868ae9","sha256":"20a6ae6ce038f9f48d610c05d7269cf0a4a0fe2226a86172498b9ae3b7ddaebc","sha512":"0baa471a56f84c975a9a0a869bd72106f47d368032b27feecc3c10495b0d3b13852b4da93683ae8e6a37db068d4ee91fb7f06ad8b9553e935ef31b7344ad693f","ssdeep":"","tlshash":"cb21020783c19fa9be15823c03e4a19072b1a4c6f0f0a7dc7b971a52d44d8d4419e7fb","first_seen":"2025-07-04T10:15:19.602231Z","last_seen":"2026-05-07T01:34:08.520118Z","times_seen":503,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/aave.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/aave.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFIc8in4z63dmWawPwTDew7RR9xX%2FAueZu1Yn2%2BMXp%2BzWseGQK%2BDWn0FwoO4k2s3pqc2DVgYWnSfXGXSeTIfi9Uo0ftySFmZ79XWiLpH6JzcDzcykZNh4MaSJno5Ri67QP46eGmN86gCRtY%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:01:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"3da-64df05737af88\"\r\ncf-ray: 9e292d4848818deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":986,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43b3ac8008da5b6ac71ad555efcf5986","sha1":"be7203559d86576a67cc91077314ea26d2a345a9","sha256":"55071c18b66729760d28f32766e4a39acb9b7bb179d9fd9389f1aeaff8d41829","sha512":"9ac3b42a9c11bca5fda1681782542761eaa12fe85731ec54516cd4128ae918926f7cad8256591a02775ffed5b653f9ff663c14a7314a62390f4567ee6d2dfb1f","ssdeep":"","tlshash":"60112d02829cc6ba9c63c331a6e870c32241f435f0b0a4f9fdeb5464860d2f00906ff6","first_seen":"2025-07-04T10:15:19.593113Z","last_seen":"2026-05-07T01:34:08.504033Z","times_seen":495,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdtmatic.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdtmatic.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:47 GMT\r\netag: W/\"586-64df05a995d81\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMjuoUjqHa5luMnGecSRlJAnDLzRn8G2lEpGvB5xoGaHspmcSNar8JZahJduAiuw6R4J5Dq0C6Zcucx8sQ8TcUAuvjs21KcNUyMbC%2Ba2sEEn4u9kAehtDTXi%2FOvaVXss1q13nS0ttdUUqj4%3D\"}]}\r\ncf-ray: 9e292d4868948deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d0e6e76cbffd37bc0aef1b5a85e0f60","sha1":"de286a9d64f68d471abd382e796935b8f9d73e55","sha256":"6136d482b83eaa2ab3d9f13a6682876a75eb5f8c070f0928dd112db2e518f3eb","sha512":"ba9d2633aa02fa8dfde4d602ca7d5b426a19a93c6d860384854d365b1c1b9b2e4831e4a0a1150325fcd976717aff2be225d4338f88e45c60c7f55e14790fe6f9","ssdeep":"","tlshash":"48210335439c82bc398a0bb8fd7864f0c4cf9add44f5e3a022fd861071960d951ed8ca","first_seen":"2025-08-08T03:14:57.897783Z","last_seen":"2026-05-07T01:34:08.475291Z","times_seen":484,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdceth.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdceth.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:38 GMT\r\netag: W/\"5fa-64df05a082d6d\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lViJUs3o9zOPTs5WwuAkH5tC1AABdC5Rfge8zWm2EF6g6dJJe2evSVj2aTih6nOcCo1MwVFDZv8Y1Sjc8XR7%2Bpd1GTTdfrSrne0HAZZ6uBi8YBbSxb%2BEpXBTr5BC%2BH43omwEvFw986BwcqM%3D\"}]}\r\ncf-ray: 9e292d4868978deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"322c3a29937251efd44281265efce141","sha1":"25ccd65f50945df52ac20313e9eee1daa4231a02","sha256":"25585d58d4deed391e7d396abfaa5c8724b1248c62d2f4df66fd1a5e918207a3","sha512":"9ad9ba6d21bea4dcf6c7a33b4dc4ddd73f8e90a6cba251534afe89126f241522698bc01bf0176dbeff07e1341b21dbc369023bda8b74f4f190223f2e3c92b306","ssdeep":"","tlshash":"9e3111f0e1343338ce8a4bf49e6e74b5bc8f68ee45e893107188e65072512ce22e9965","first_seen":"2025-08-08T03:14:58.202197Z","last_seen":"2026-05-07T01:34:08.490219Z","times_seen":484,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/btc.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/btc.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:01 GMT\r\netag: W/\"815-64df057dab9f3\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=031BDFXzwnkvKppGHzAsQQluaa2ntNGEA6fwQYpO7wdH1v9egM3h6km9UKjQL2cJ6%2FSJpgCIPYB5OQwcBBRmE3jULrg0yFC9K68yfp0xSbs1i6nzQQrRF7oXKaF3A7jIvGMO%2FEInrLxypYo%3D\"}]}\r\ncf-ray: 9e292d47f86b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f92890de8d6512e2597d378f00254e71","sha1":"ae4f3414bffd2594adedb794d4f9eefb2a86c382","sha256":"51a4362311aab24ca9f1b68d3ff5faf423385db8ffdade0894bd6acb799e53d3","sha512":"6ab7b81fef67d104a6fdf5c9523efc3d03d6039913a3cd3dac6d22fd4975d2449be7043953c840ff0ee8fdc7226894b07c287790381b0fb653579d8dd55f140f","ssdeep":"","tlshash":"cc41a5fcca1a8952ca9e4b6ceafc4c5e2f23604f016d01fcc58296f57c125f58645a9d","first_seen":"2023-07-06T20:31:23Z","last_seen":"2026-05-10T14:50:56.345531Z","times_seen":753,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/apt.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/apt.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:01:53 GMT\r\netag: W/\"5d3-64df0575cac50\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCI8z19c%2BqSPZ9DU6YMoJ7cZQrj6iJIxo%2B68F8HDGCW0vhT%2B5EpoFPDfJZj%2F7w8lI0Ds7h9V%2ByI86s5gV2ONoE2yqWsXuQ66I4keoozVEkn5zmYEM54dk6SFUH95bDBT%2FYFU2TClBflucuE%3D\"}]}\r\ncf-ray: 9e292d4848808deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c7ad284010a856ad4cdd3f7bfc6b909","sha1":"aa7da091593b330064132f70b65a86065fb75845","sha256":"c7cd444572695311269e63476d0851682e0bed974c89b49353f039b1e033b0f3","sha512":"75222414c7c18a7997168a511c88716d6bd6e21c4913873a785e6fd5077d0ff099a87070be9df43d5cdd3a4a01213a737351d16f4c6facb076ec37f9e5cfb436","ssdeep":"","tlshash":"f231e20bc350daf9ad424538f315b860f6909ca5a470f1d8aba91855f50cce471adbeb","first_seen":"2024-11-24T05:56:59.788956Z","last_seen":"2026-05-07T01:34:08.520809Z","times_seen":492,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/trx.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/trx.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNJ1uXGZGPKYRaqm7wPBG%2Bx6CXUIISVK92QpKaRGvdNE1laQ12uTerOAMhP9Drt18Ufy0yZqEmSePYfkpmq1pnowiXyXazojsWwsScd0xJzF8wZ7tkGlclB77Pe2UW0xpPo9u1pJLq47cfg%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"28b-64df059b444e4\"\r\ncf-ray: 9e292d48086f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f3f390369f12750aab8fd55f786372f","sha1":"6e657fc446743d340bf0443c41fa07e893029c88","sha256":"6f5f6afca8e2facd43297b21b9c453d61994224184265284605e0ad21d3ac09b","sha512":"62ef62d6a342a8af66a436447b00329feea2ea696bc6935de9d9f4370a6c017bcd90ea2fb85d3a31a9eebb61ca06fa0d55c55c95c8e32fb983e92e082115351a","ssdeep":"","tlshash":"27f02dbf11657ab9e595a3813145b01e21a4b002f6b890ae2fe76823b8098f780a0c23","first_seen":"2023-11-07T08:36:10Z","last_seen":"2026-05-12T07:55:06.948698Z","times_seen":741,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/etc.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/etc.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPqugTOmTem3wX4JVqameK5kDMNzoI7If%2BcWKq2qmb9oY0S0%2FWyrJo%2B1EUNgXLmH02Y505gDtYdfK6G%2FExa2WBRCs56MafSp4f4eqS1qakjveyKs%2BAAr3xCdk9PG2lO5L%2FlL3d7y46ox8tw%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"3ba-64df05888a587\"\r\ncf-ray: 9e292d4848828deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d4534ae68dc2efc7ee6f7186e3c8b6b","sha1":"b803c4d8579db205bf55bfc9761db80d68baa1e7","sha256":"07ec8c673d077df357ddd662ddc84f4ee80777bbf07800426999f687084f860d","sha512":"8b1d3dd409226322c6d7b801ac3de2f3a70671ccb7c90bbbac466e1f32d50d6df9ee77892b65bf403fbf97636d1f11ad0a53297f84a518e82536448ad426958d","ssdeep":"","tlshash":"e1112d3d7bae7cb05a8643587990b8817831316d6bad01de78e5b5335d0aab10833e43","first_seen":"2023-12-24T22:32:30Z","last_seen":"2026-05-08T16:40:53.43963Z","times_seen":502,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/xlm.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/xlm.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO00UXeomVCpi4mQGqTCkatfVI9AAjiIXtXGo1ZLtLP4tJCbjLyiMkiLqxwq3Y1sb71TJzbOMvmng8ZHlfAsVoIt0YFPcaadr0HsMc92giYJVcEpjHW73WGLSJ%2Fhhl8GKYDOL3ofv4tw1oM%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2c1-64df05b2b8f65\"\r\ncf-ray: 9e292d48588a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad29091e7d23481da4685f74853b6ee5","sha1":"86c0460566479b9b0db731eb497bc970ab4d99a8","sha256":"c2e1a69ec05cbdf97b55af1e2d815fbc2a1dbf64f90b2eb5114125a3db00fffa","sha512":"f64919df5b486ed747e8e3513a29e3fa384f3afa6fb865034e812cebf802ec9838cb5dbe01911bc725c1967a079057947f0b2fc91d355207521f057167212f83","ssdeep":"","tlshash":"8c01c073634a0f20f1514798afc8681225e2716671d5c9b867522be92d05cf32930c30","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-05-12T07:55:06.964516Z","times_seen":512,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/weth.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/weth.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:54 GMT\r\netag: W/\"85b-64df05b01d3c5\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtrAw%2BLkASkiEGlFOrsXvovpP8pMnw2f%2B8iNiXDOnpwzoJsN379c2i8ULLKdU30m68svr1d7N2TJE0ZLawbyk%2FJ8s12QqDE%2B7JSSG5%2BUitzLhh37TAAzyj7miqDOX2fxCNIvC5eBuEZE8Mg%3D\"}]}\r\ncf-ray: 9e292d4888a58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e06ef72a3829d2c0b7ee12b02c618963","sha1":"290daa3f604e0f807a26820891174b8b49a09dfa","sha256":"f7a5b397898cb68f6928de822474b10447af4c0fec8b7a540a2842cea9e776c0","sha512":"99043372570509443c19d122647b946e251c079d7df3345e77d01891f985bb5d1206bf8c608da478cfbd29b93883487df4d5e609c656581ada721a336abacf29","ssdeep":"","tlshash":"6c41239531b965bcd40097328b2f357af92358e9364155dcc2d43f49e86482e1c96dcf","first_seen":"2025-08-08T03:14:58.252172Z","last_seen":"2026-05-07T01:34:08.482308Z","times_seen":485,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btc-swap-no-kyc.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:42 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 414889\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-14T16:56:28.160066Z","times_seen":178346,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":94,"dns":1,"connect":7,"send":0,"wait":9,"receive":11,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/xmr.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/xmr.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EblJ2ihnbYAa4omW6BS8rHzcIkCTIPMj9tplw5f25LWtWcgUkAGA4EIpKA6Jm6GL6k2grIqPxIJPQGRKquX7xuAMb4e9QWaAfbvWeKIL%2F7AObEFc9nEW1yHj1Az534XBL%2Fzk9qG2UjGDfiM%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"3ac-64df05b44860a\"\r\ncf-ray: 9e292d48086e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ac5949dd8d861e10abeee3e4d546d0","sha1":"172f8c99e4b56bc6be6a86791e08fbe867640b40","sha256":"668c28e1a5e0ce6839c6b3a8a35c5dfba3e284a442f7ae4049398472f72ace27","sha512":"d0cb29e855ecafffbd4a49c4b287849ac133c97f0aa9d098d197031add5df8cf51668d2ec34db0934230c216952acf87bc7c4ddce33c6564da2e39e56395eac5","ssdeep":"","tlshash":"d7114083a0702d1ee07689c88be9ae260c7c91b563d92dfcf6d32d3e1531c7811c8a90","first_seen":"2023-05-22T07:53:58Z","last_seen":"2026-05-12T08:59:02.710161Z","times_seen":542,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/bch.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/bch.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:01:58 GMT\r\netag: W/\"4be-64df057b0e6e2\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9BBwWSv3fZlH0VxnfKpjHTEC9hJ8mN6xwWVHkL%2BBDsTu7ii5fL0uvxfr8ur00CS8z5N9pnl2NTW%2BAvVbtKydLnYdYN1hLuaQB%2FaXZeXq90DB%2BlsmqY%2BGskohzq%2BZzDvrfYQuWDnqYtJKsw%3D\"}]}\r\ncf-ray: 9e292d4818778deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d291a67357599252f1208c0842ee9","sha1":"d1c95e8b248838d153735628c110951d18aa057b","sha256":"0af9263278022b11dd522c2ec26c5dc4e07e35f0b421fac7278951f0066795aa","sha512":"53d756eee3c4cb922a701fc0e427708d4d1b25a440bd5a2ac02e454288cd4a25ed575f42db132687b408525e155776df42b3acad643de2ef2761a64d89450ae3","ssdeep":"","tlshash":"10213f0881d5a87efc50e11953a0158633b4ac6fd430aa90f8eba85ec24c8d0128dfaf","first_seen":"2023-07-23T06:53:23Z","last_seen":"2026-05-09T07:39:24.412144Z","times_seen":799,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/arb.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/arb.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:01:53 GMT\r\netag: W/\"782-64df05762cea2\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWDBQtsAyDNtK9dmyVG%2BHn%2F86eKLOJoUEiBPGdO3IWh%2Bef1NDrBAsx%2FTX1OwqgMzQfSRvTars9rigbS%2BeGeuH3IYAU83cRzNCHWah60SR%2FF4pJHGk6csfwZLksBizqrq%2B1CqTTRumWNnPd4%3D\"}]}\r\ncf-ray: 9e292d48588b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7e9bc0adcf5af84067eb66e36be7b6b","sha1":"f099b35e6d366088d70fc148f1a910c119ce79c1","sha256":"f719363fae816b4c9af724ae8935e6c978792fb774349cd0582b1a1bb4ae12c2","sha512":"c8fa17b077f4c89fc2024a6bd050084c434e60bce91e77670e6c2fdeda5840b43ae4d145afed719299e28e4409a22154d7d3e2568e83b1905b2a30ccdf48388c","ssdeep":"","tlshash":"e1414208019d3d4e76edc7c53bba41da54fbabfbd1410488b5fb2cdd67015650e56890","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-05-10T14:50:56.365461Z","times_seen":561,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/favicon.ico","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:32.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:32 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 16:59:56 GMT\r\netag: W/\"10be-64df0506acdd9\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oobsRIyLfYRINaZCVK7Zx7cGBvCxGmP0pKfMstzSWlnb%2FbyaLPz2sK86%2F1c2DiMiB43eVw8z%2BVgLN8zyfr037WksxYQdDLaDfcihDD%2FrmT8G6OWzEjCN4UXKL6yh%2FaphuAZyN4ty3NnDep8%3D\"}]}\r\ncf-ray: 9e292d4dfa1c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"0f5e81aa5b0f8c854c571df8f6e8427d","sha1":"619086f4a23b734c7beb9d243146fa174d67f637","sha256":"c0bfba561f8f6db635c6759b8ddc125c14988aa405abef719eca0d5d4f2fa20a","sha512":"f14b58f106a437c55fea30a4288137bf8e2414a9d54738b8162a9e2d81bae4da52db14bcc4b6e9a3bfbc50ae98a7fe9cef636cc4b71755f70a1fc5c0664f6097","ssdeep":"48:f2CYhkfccx0UQKaQESV+OdRUOozliYqcOyz+mNV:sYxjHEzwRXUwcOyt/","tlshash":"4e913302e9c7262bd3c65273c51ffa3157af9e9d2c4b50882098f6625f33d8a1e1581c","first_seen":"2026-01-24T19:48:14.102195Z","last_seen":"2026-05-07T01:34:08.508681Z","times_seen":24,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/css/design.css","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /css/design.css HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 2864\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:01:43 GMT\r\netag: \"2c70-64df056bd85fe-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8mBxlojVOqTLPBY6y0RzkqoAsVSHodojqSZM1otTcq4zVgmg0t%2BN8LToUJpXAmKXNBnbMDcLNyAIYsGGgi1YkyfoatAo5HuBVLgC60mxNOC31sxL4u96OWpIf6OSD9%2FNzxm2gKvYnr%2BWWA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e292d47f8698deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11376,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"683f60edba3505e010c403e060af288f","sha1":"0b09ecbfbb03fb5f301194a5169d949ad1c13b61","sha256":"c857a9693ceff0d117c59e0c1085fef81dd0e9fe1f0e0f9743278ab2c7a41965","sha512":"617dd6dea4b5cfcae31741b6c4b35f72e858c30472a65492a8219de4fd3a27029a3cc9905dfea7f78bb4f78e0fc2ce1fe59fadff5bf9703802e956291e434b02","ssdeep":"192:3EK/oNFbckSpPvqKfis85J+dEpbbdAPqhM8nxhx9e:3VwGNqCa5J+CU+Dnxv9e","tlshash":"323263d73b581144f01bd5a879a39f9ba31d6502e006cc7c6be0102cdf8d6e9a6b3b8d","first_seen":"2026-03-26T21:16:32.563959Z","last_seen":"2026-04-07T14:32:12.22147Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/link.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/link.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FEdynMjPHtf5HceWyMqEF%2BjZP3DldbsWhFVAhRvas6EA8Isy9K4WpIOBAvUcZMPrjnlNsp07QRm1bbblI7B2zkMzcwgimy1fHj%2BGAj%2BuvQd%2Bn3iq6dzM3Yy%2B7SH5q1xZN8q%2FmqmVKq9B%2Fo%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"183-64df058ae32d7\"\r\ncf-ray: 9e292d4818788deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b02bc11930246d53d859deaa960862f","sha1":"8319ab21888d10b5afd2b0dad4b24e642b6c558c","sha256":"44f03722fe182e5cee65cb2811b293ca23d759c150d00ac309179a493b572875","sha512":"93c68fe6e30e65471333f4ba3ff57e9950f8a1b8ad0da0b12e46c07d04023bc4e19dd5bdaec86a3931275f8fa05f9dcd23c7cd64a640f671a9e2e18252639b31","ssdeep":"","tlshash":"cbe0689bd34a9ea8b61a812866d4f024d8a5bd75c28a9ca5fae3642f905c8f41910846","first_seen":"2024-08-20T15:05:04.25452Z","last_seen":"2026-05-08T16:40:53.473531Z","times_seen":596,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/ton.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/ton.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3ZdAPF3o03PnLaXvo673Xr%2BxkhFvXXwRS7%2F0Emw1xsCg0iREWpo4Om2stcu6njkE%2BzKuysWjnmg44rDbq4Yhx9L3ADlqH4744ciQysFE09%2BgfLmfZtrOfUl4DBOSOMWRRlkPAhl%2Bb3eEMc%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"328-64df0599f9bd0\"\r\ncf-ray: 9e292d48287c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f26a4968e7bd522daab3b7a71309bb7","sha1":"feedef31ecd11c0473ab2bb2af23a32b90634626","sha256":"453cf5649b76d7eb5b0648bd83aca1c5958cb042d75d89e81b0f0ce6201a66a6","sha512":"3333cc6363bd95447403fc146be17f4295994259f160c9528f9ec0bbdea5e219f0f5f71297e402bf8c3d92040943ea724bb25d3d03f561d4ef67fd715994132a","ssdeep":"","tlshash":"6f01120583815f5a6814861073ac55d2b3f5f4c7e170a9cc81d6343af64c8d41688bcd","first_seen":"2025-05-23T11:37:09.503981Z","last_seen":"2026-05-07T01:34:08.515887Z","times_seen":532,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/ltc.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/ltc.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzFrCtBqtcQyYmVA60aJ9weI1ljdcA81in6HDHy1CYxItld9wCe84KlMitdZ6Y%2F34xgr7FOhL4HJ1P3SytLcfYpHCxzTCLcOJaLtvjqQuVkqPDgkLHd58hagQ519wG%2B7%2FX3yTC0SkCOKaY4%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1e9-64df058ccfdad\"\r\ncf-ray: 9e292d48287a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6046cca14ef5741d48469675250f8d1a","sha1":"e5d3cb531aa29112387e94a9d68a1ea583576c8b","sha256":"20dd004b22b76d98151807b3ca99196f84edf24cc5d66c33e3aaabfd9ada6d19","sha512":"e4153f5893945f12cf4bcb8b0a66e1b360fcbdd62be00058ec3e6d32452e3aaed2913e3328ca99a3067acb5ed5964df60796b7e56199dfb316790bc413877b31","ssdeep":"","tlshash":"f6f0d47bdb50ce2ddb50472cc0c2b50210704542f1c24294ef97012cf80b8b3747c9c2","first_seen":"2023-07-06T20:31:16Z","last_seen":"2026-05-12T08:59:02.775586Z","times_seen":742,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdtbnb.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdtbnb.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:45 GMT\r\netag: W/\"67a-64df05a763192\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7o8HmeAL1twEDuIjwQ0lU%2BQvY33bdmiaobOcV4TBQJSVCTXNu8bfx%2BWwz%2BPyS6DTIc6CLl1qA2hynQ6s7s9KcudowiBrp9Vnf8IBLNOsnA1i4LXCuVtLmAhcxSSdqbuHBYjV3%2B7Mv%2Bq5D7c%3D\"}]}\r\ncf-ray: 9e292d4868938deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8336cbfae1821eaa5e60c4a732199e8b","sha1":"d1058b932852bfe85ea3a028bd1a745f121f7ee4","sha256":"0d861cdf93979e1c668f798b89d66eba2c77b187d9e3a6603ca4a0052a2f8e70","sha512":"d8b827b3101ef220e9867d3203f1118c4cdc5ceb041371dec513febda85f052ad5070d8a7974cf35017818647f8a59b7903b0afe9d512e2370b0a73b5d201f4b","ssdeep":"","tlshash":"70319ea8d676c2f46e4b4774ce742bd22e66d34c97a0472c43b26720b2159f37248c7e","first_seen":"2025-08-08T03:14:58.328265Z","last_seen":"2026-05-07T01:34:08.493215Z","times_seen":484,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdcbnb.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdcbnb.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:36 GMT\r\netag: W/\"745-64df059f00da0\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0c6bj%2FTP5aYHWkTvCcSARDEHOHq3DMA12FsF7c7duMJkzh8O4aBJFQHl02v8aIbveLSKc%2FWwMBLGLHJNsCPFQZCu%2FvypV0ZpUtheZfPfwenvGwWzLXrTJcYAqWvf8CjCNREUbWaswsXxAc%3D\"}]}\r\ncf-ray: 9e292d4868998deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0ce7292c332994628c0e1b4c08ab3f4","sha1":"1a9f3fd35b77a7de9671d1fd808d2681f8110da7","sha256":"491df7d4fa868a5356791fb10e13ba0ae2035752b4ec38c37ce882f8ec3ba457","sha512":"d4191f59758967ba29c4af68028487bcfb88f8327b0b3685bb3d82f53312ee83ba16cfa6753bdedb444ed7596c419e263f9f68c9e17030ab950e946539116ae1","ssdeep":"","tlshash":"0931dca482246373ce5bc7f4de7d7ab67c8e50ad00c4c33595fc922072511dd22aa4f9","first_seen":"2025-08-08T03:14:58.302643Z","last_seen":"2026-05-07T01:34:08.518027Z","times_seen":484,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/daimatic.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/daimatic.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:07 GMT\r\netag: W/\"4de-64df0582d046c\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQbG3p5vUg2VjbdPi4BwOrP0aaDJlnre94YGzWJdKhc8ftpXUxrra5Q9ov5jkAmqn5SWb8RAf4OybBMP3n0PMkjniIQvDG22puHfiuxdAk8rhHsICSbGFpXcKW6z%2FfwmNi6WVBaxxMBsB5o%3D\"}]}\r\ncf-ray: 9e292d4888a48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4436cbc4b6eeeeb953b4c04bc7c48e52","sha1":"49efdacaddb14aeb6bee5c3da7c7c896280157ad","sha256":"053977827032cdcccbe0b9fae05550151bf57a20bc6b047997e7d8f3c3e3239e","sha512":"3999d7da8e0a80642cff3a60a13b6222f6b9bf8ce58df7115c643ea00f1ac1e84ef2afe2cca8a14d83a46f6694a5b8d56802a2d5957efbc727e03f91e3441056","ssdeep":"","tlshash":"5621cb75c79982bd38c70b78ea7844e0d4df9f8c4cf9d2d181bf9568b2910d441ed85a","first_seen":"2025-08-08T03:14:57.943685Z","last_seen":"2026-05-07T01:34:08.503333Z","times_seen":483,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/xrp.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/xrp.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ef%2BbYowUsaA9PjbwH5S3Z%2BnWN6P0gSpTRoXA2%2BmMKp3fSDKWrkux728zxyIBf8o%2BWyAIA9tywR9PDurZeQ2rmiptlhBZUqUsqf%2FX%2BuupujDR%2FjqcRYirBcpleWDQlcinYQOKGP2orv9yjZs%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:03:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1d8-64df05b57046d\"\r\ncf-ray: 9e292d4808708deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"639b151a2217fe161ce8042566cacec9","sha1":"64e49a6afb3c8b84342c50821b0db39defad887e","sha256":"7ef9f0d812984cb142e870166076e2221266528206274b080a2f0035ade4224a","sha512":"bf722bc3adaa6bcb2693f989959f36dba411d725b35c0ad08d4cdb96bfbdd67b52b7532d08c9ebfeca2c0559dfb3179cb44fe573aebd462ec0f6ec17dc1a4817","ssdeep":"","tlshash":"b6f0dc7f93459df4f11ac37e6c887680a0b3b0408a9c80dda3c13d232104c626032615","first_seen":"2024-08-20T15:05:04.276138Z","last_seen":"2026-05-12T07:55:07.010792Z","times_seen":713,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/pol.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/pol.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xhCAR%2Fa5adfyyLeR17%2F%2BvkBglGjH9RnM2mUd%2F6J314KX8u%2FhMBB7AYiopJlbDcmA6H%2BRp32nDLSAb4Bhcn6FrXX0qNzp5eJi%2BlD9tGJGQDEEB2NR7udGhn2D7tDMjMhy3U%2BY%2BH0zDl46Wc%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"273-64df059378733\"\r\ncf-ray: 9e292d4848848deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa72aafc7e825106d06b43aa3d1dcb6c","sha1":"6a4c770f18a70687baf0f1d884bd481fba583fba","sha256":"a496a1b5d645e93a82d186448d686aacbffbe431282b1df283adf5015c64c237","sha512":"256729f2f1bc66a17ab67005e9de5e7c4768b136159c55a283e9e35b950eddcc9e3f2f4adee6101e3ad4d2ff112a3e6e2855143f5ac1ac586b2dd6363085510a","ssdeep":"","tlshash":"fcf0dd48c309b83da426470093bdb1c173a172c9e2540d8c94a528b7a597c8c42955f8","first_seen":"2025-07-04T10:15:19.63792Z","last_seen":"2026-05-12T06:26:42.646581Z","times_seen":552,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/atom.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/atom.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:01:56 GMT\r\netag: W/\"842-64df057867f61\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRu1ZN5qG72EkCU90Z9ok59dRheP03A94Frf1MQKB4dtL0yLR7Q7dlbuDLbwQ4StrPPGWXpLcqwvosS8XaX12Ct3oCpIYrLfJYRSPeUHvzu2gtXeB4NxWnI0lA9gBhdUOpxNjwD9xPMbEeY%3D\"}]}\r\ncf-ray: 9e292d4858898deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e915ff17eb74750c84f8b87158be2d5e","sha1":"09c8f89fca808b27d169819d8899f0a59f761bdd","sha256":"4010e79c2131a2cceee1027940138e866c0c95fa961059ce6958cf5a3ea460c4","sha512":"8a25aff49d8176fb636c00b4e8ea7d5b1aa93ff6bda312ecbff55da86b1206c13366f6666f4e183f781b8230d2053d9463f50f2368ab92488c327396b968ea66","ssdeep":"","tlshash":"294142b7c38d2f264841426ed9e7607925a89138eb7491ec9763e22fbe059f0241cdec","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-05-12T07:55:06.943991Z","times_seen":646,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdttrx.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdttrx.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:51 GMT\r\netag: W/\"86b-64df05ace4483\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bitgc8hplQ8WDGE0WWStziTWBGWmc70TQOfSwGRPtcWXE2liKdL%2BmSAaRLXCf4fYcrLyoBbC%2FgmBIqYNdmCM9lKeYmo9WGaLyn1yaf4aOz8YDpm5oPR3DxlcL30jrsb4B6yjpvFX54oRXfY%3D\"}]}\r\ncf-ray: 9e292d4858928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2155,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65d0769f04cff5821407a498732732e3","sha1":"a503d417c974fc1e3a487c7471cc91af07c2f727","sha256":"eff62a2f0d19a238745f0644f5db3eb0e22ab3432b51fb40fb23843e2d0ceab9","sha512":"0f787807b5f5ffeee4358f187a2b1e737b0e81c2d7775a7b358d9cd59723fb8f844599f743e42314fb2db4060bf3c1bb43e4de5f187e44b0c52b4a2a2c8aa536","ssdeep":"","tlshash":"f84199788384d3789ecad7bcaf35b8b4a44ea0fed1e283148395915072d24d9f3ad8d1","first_seen":"2025-08-08T03:14:57.853514Z","last_seen":"2026-05-07T01:34:08.51731Z","times_seen":484,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdcmatic.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdcmatic.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:39 GMT\r\netag: W/\"747-64df05a192530\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWR6fzKD0XqPNxD1C%2BMn3qM1Z7lyiwneYbIlsn5QzfMccWqkQvz0mNjui0iwsV5dpLGZ1TshPnrOgk8lHIhoXNz6zR3nOPE7L720AaA2XqHvOje5Kel9YFX64Obl0gknsPhH8DfoK2TvbSs%3D\"}]}\r\ncf-ray: 9e292d48789f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1863,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"168fcea028c4ac606fabb64b132cd323","sha1":"048c021a3a8797e444903e3e9c6d618357961864","sha256":"0941676070cb87e8a7fe56295a5dd41a6958368f78c904d0d74e143e57552d0b","sha512":"95362941bc9622ff2ef4a78909017218af8250681225de4e30e69e42c8c31df6519f04575bde726d517587c0c051f5d0a9a3452c04d739a4dec51047fcffa80f","ssdeep":"","tlshash":"da310e70c3689378bdca0bf8ee7874b1e8cf9aad05e8d35461e8c57072510dd12dd44a","first_seen":"2025-08-08T03:14:58.274832Z","last_seen":"2026-05-07T01:34:08.48603Z","times_seen":484,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 16:59:49 GMT\r\netag: W/\"815-64df04ff29c31\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKEc71GVWxZ1lbGaKazlJA5u%2Bbz5aQ6mm47ogxJ%2FQCvT25ILsSs2X0LTiDMgzs0SGSDV9CsqnauddvDHPJPEJ6IEck79u7bjqwfD16tJQ2gIG2W8kPBknNiCMW70gS%2FHxAHiBkuwGGDwqX0%3D\"}]}\r\ncf-ray: 9e292d47f86c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f92890de8d6512e2597d378f00254e71","sha1":"ae4f3414bffd2594adedb794d4f9eefb2a86c382","sha256":"51a4362311aab24ca9f1b68d3ff5faf423385db8ffdade0894bd6acb799e53d3","sha512":"6ab7b81fef67d104a6fdf5c9523efc3d03d6039913a3cd3dac6d22fd4975d2449be7043953c840ff0ee8fdc7226894b07c287790381b0fb653579d8dd55f140f","ssdeep":"","tlshash":"cc41a5fcca1a8952ca9e4b6ceafc4c5e2f23604f016d01fcc58296f57c125f58645a9d","first_seen":"2023-07-06T20:31:23Z","last_seen":"2026-05-10T14:50:56.345531Z","times_seen":753,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/avax.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/avax.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:01:56 GMT\r\netag: W/\"653-64df0578b4dda\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=armzvGTTDY%2FwV93iU1qXzwWowpAhf7JgFjTS2VBJ8bOPWnciJ5E5lNCFmXsc29mRe3sTAeDjrrXkWKa9zXPJTTGMD9QAJsD9HOuihLUndU0DxRn8K%2FcSqYxl999kRq4sfxZAIWe9UEn6qis%3D\"}]}\r\ncf-ray: 9e292d4828798deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e9df24ea466b546f238627045e3f242","sha1":"f77d52a7ec76d6c123f80edf561bc76060bce738","sha256":"1770e468b98420107a7385066571b9ea8c2a86c327c16f5bf59108983a40657c","sha512":"c78827f51b37840004cb8855fc78f1e647a5a66c72817cf8511c598c47aa10db2ec372f358df6ae6befb90a026e304872d20e911e34f5a99e973647aec68a733","ssdeep":"","tlshash":"c13133dc1a4688dc5dc485f4f72030d4da1ff0fd66026e15c248ae5868938e88e4d55f","first_seen":"2023-05-07T20:18:14Z","last_seen":"2026-05-07T01:34:08.501806Z","times_seen":691,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/ada.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/ada.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:01:50 GMT\r\netag: W/\"163d-64df0573580f0\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtwcV%2BlOdFqajOCvYJcmpfSbmDO6IZyXVMXgG9NrpE189yjwWWzKAtPlBS95%2Bfh1vCWupnwKXaE%2FSWBI4GlMxLG6ECm3rJOcIhYnuPGxgsxWQ0YqWfjp4m1mPMieYIYtLdo5gT9nVAtIl2g%3D\"}]}\r\ncf-ray: 9e292d4818768deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5693,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aea691c581b22a12b85bbe81506ae8b","sha1":"aa06a813f0588d3836f76ae4624fa51faa7bfa43","sha256":"59c9f3504914a9c3f16669e94db5469289161142c9257f1a3741129ffe2c969c","sha512":"b6a26cf5523f43de49c34fe2d5fca5fc1ea1b48e4d429be6197244a65bfc842bc002b18292879e112eac0d4858e59814285516cd80b38ccfa093c371dc96c5c0","ssdeep":"96:2vfuV+ovy2ZN6EaiFkhspmCGuG4OduEaNJfvKcZB7t+yTWXqzqxM:uuV+ov/VFkhspmCGDGbf/7tFTJzqxM","tlshash":"38c1bd520304ebf7aca587988ae8148575d69deff430f1d46ebf1427da0c8c489987db","first_seen":"2024-08-20T15:05:04.269975Z","last_seen":"2026-05-10T00:46:41.822097Z","times_seen":550,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/pepe.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/pepe.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:21 GMT\r\netag: W/\"4d69-64df0590cfc8a\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMNwjsFQbJxobuUXIrxS3b%2F37SxLesr9phSVIiwQeSr67KE81uJRkWx78dRRj9v4IrRs2yz3FeEMTdVr1I3JUeLhvAqlNvGr32x6aYnjoisyY1pBmtAWfXBNW2%2F3FuTnf5rhJjbxQMcvCAE%3D\"}]}\r\ncf-ray: 9e292d4848838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32b9ac73ce19668645d07c043bdb7ae0","sha1":"0d668bf6a962dd5a6192a0ebd003502edc603c94","sha256":"cab2d27b6b789d9f86dbbb91ada3b3a5bf3d83b3aa02e8145d81e89131228dbb","sha512":"74652f084d180e65e4379f946d9232c09e90fc7d6c0e0b87cae2e0919e8d19601ca055c622d787388ea669d3f54c3c4307dfe94c15bc0ae25b7a9dfaea11d894","ssdeep":"384:7VcTgHGcXSvgKIqL0xKjc4XnNzFLbu3dMeaWGd4wYzEEYFUgSBa:R/GoS4Pj4dFkBVzbgSk","tlshash":"3092a913438097bafe984868aa6124d5b1d5ecd7d4b4e3c0eb7f140ad94c4e0a5ac7fb","first_seen":"2025-08-08T03:14:57.833421Z","last_seen":"2026-05-07T01:34:08.484153Z","times_seen":487,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/op.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/op.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:20 GMT\r\netag: W/\"647-64df058f778b6\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aUOi2bV1ACnZb0ON2KEGXSo1ynjmmOwgt6CTBGzW4q%2Ba3aofCgn0uodpYcG%2F%2BbsswKqd1DFr%2BqDkLIbQb3PSqnsJxLTrWVPdtry4ES221fXZGI1Fj%2BvFRMWIt8s%2F22YN%2BXW77RgP8V7l7I%3D\"}]}\r\ncf-ray: 9e292d48588c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1321c628e6fc01f56221b42b7899656","sha1":"14b324aabf8931c1f10bbfe101dfc6882ebf93f0","sha256":"8c52ff09c6306abac25cbf8f051db1596b41e856f1c9dd55b27c1a42abefde01","sha512":"b588788f22e971e919d79a055c821ede95089de0d17eade09e9911e50c15c7e66811237ea4a495a65a68ef2d4d04828416c41f95f8bb25764a569622ab299ddf","ssdeep":"","tlshash":"df31ed1a4701cbb9be99413c4aa0798d73f2ac95a174f4d4739b106ac5488d4694c7ed","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-05-07T01:34:08.510184Z","times_seen":510,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdt.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdt.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVYlVN3FsWlkQ1W%2Ft2dDc8EzF1LzmbDR%2BDmbnOWg1MIz6PXPFjpFZ8XlA7IkoNrLnBWwIcRxZCdz8Fs5tCJijFIDrjRm8Tz38Zv%2FLvZIWOTxI335hchidMCSs7gsdNfGvm%2Bb6hyh8WUlzA0%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 26 Mar 2026 17:02:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"36a-64df05a46a1c1\"\r\ncf-ray: 9e292d4858918deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f688a0313c926433ef60c377c7cc51","sha1":"7edea9502e75583e0f93815ebb6700ad04af7e04","sha256":"fc9c52d67a9dd9c5983c2f679218e804d9ba4aecef8a1074003e3de9efdea088","sha512":"3c957f1758fb3b3a1cf125a8c4e4a5728e0f7072202c421cf834306b6f0ae931291d3181ca725890e67e4274eefbfe114b4796f1cf5be597ab70b8f39c30f3b5","ssdeep":"","tlshash":"4611e3a6d5982f7005c9077c561a70e930f8c88ff5a445eddf7a5a36bc14cf68d280a7","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-05-11T11:48:07.972257Z","times_seen":684,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 26 Mar 2026 21:16:31 GMT\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-05-14T17:35:51.625697Z","times_seen":6590,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":349,"dns":6,"connect":9,"send":0,"wait":20,"receive":0,"ssl":384},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/dot.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/dot.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:12 GMT\r\netag: W/\"41f-64df0587ada45\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwKFQ2%2BztlS9%2BM13psfElhqSzv3u8VYLrm%2FBO4Oj2KrzyUBjgaw0nCWTWrI0MXmMjeU8ePep1TI3z4x0MvCHgbgweyf8EJBJmkfRZ6Je2etGtmW8FQX0INeBuEi56qtbM72u44ZLOr9neng%3D\"}]}\r\ncf-ray: 9e292d48287d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7544a7dc0217267f00df8da7abbf25f5","sha1":"e5a447cc3934c038d8ff6cfded94664b719bfe9f","sha256":"eeb8fe43686e638fa2de0026fb3fa0e17371910f27e8404adf31ca800512b4ae","sha512":"48f2c2d4ab0fadef1b4079420e1f9e882979af83f2a0f02c16a0ad4d444a4402c9e2268cf3fa24572fe2042d41ed2e5be2e3b46290181c84b9245f261a328f19","ssdeep":"","tlshash":"1b118c59f24cf425991a1148c7f3aae197ae92278f909a8e80b17dbcf7728e015417f1","first_seen":"2024-12-17T05:49:38.368976Z","last_seen":"2026-05-07T01:34:08.481371Z","times_seen":512,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/s.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/s.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:25 GMT\r\netag: W/\"486-64df0594b0767\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PU10LxG70tIBrWnpRLfEzOGoqWQyVktJ38qgOTjwzqGoGpJs2apVrVhlkP9eHeJt2gYOrNONNmVXeOSK48VWpwQptG2gszx%2F5BIK5ryf1qWQAEJypL2t2FSLMdXqOWNeTfdYPu2hPOpIWI%3D\"}]}\r\ncf-ray: 9e292d48588d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1158,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bccb21c07afe15bf010c92ffff579b05","sha1":"cf707548bed3016c7670802c7b26052c65e5a2cb","sha256":"2a054b4943caf7ba55eb71ccc22058c0a84454537a9436658d5ebc21ee08452b","sha512":"a9ce685c5df36ef630703b0ba633e80f80b503e241a85449980b08a2ed173b5fa0b2a40f9d6c3cfaed71a370a80b5f8952b8041abb19d75f7d7ec33cb6a669ae","ssdeep":"","tlshash":"49211167eb49d6bc464587648d3166b17b8be49cb3835364c2e2c330624bad183b5dd4","first_seen":"2025-08-08T03:14:58.04309Z","last_seen":"2026-05-07T01:34:08.471159Z","times_seen":483,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/daibnb.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/daibnb.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:04 GMT\r\netag: W/\"4d5-64df0580613a4\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRJXWuVj2BKzH5JKyOWZggFf2Yoq1WikrPDL3O8qyCxuLuDdFoBAhFsqj3tJeV9UplSRVynlPqVRYAkz8LWpXRfqK1gVoydTJNsQFrpVaoimTG45KKkwr6APoQCEHAKflqit2%2F2mV4qehnk%3D\"}]}\r\ncf-ray: 9e292d4878a38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d65c85fccdce8a2e6dddef2c26e66cff","sha1":"d7f02719e75158096cceca288bef2368061f2176","sha256":"7b98008cf62b1cae702574b447bb541e281d16575de557e4fdeb8c2986434255","sha512":"64374064858c2c79d35673a6cbfae67688644dc95a9af2a20effb22dee8573eb07f0fedeaa5f33a5811c8118188e30d29f122ebe945486264b1e6b7d12cca87b","ssdeep":"","tlshash":"0e2167a8865005abd91bd7f0ca7c7bf67cad048c48c5cb73c5be321076521d961b54fa","first_seen":"2025-08-08T03:14:58.28393Z","last_seen":"2026-05-07T01:34:08.494796Z","times_seen":484,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/shib.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/shib.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:27 GMT\r\netag: W/\"26a6-64df059654dfc\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0IPPDLqOGIurzgyygViSQ1NC41vxiNDw9nyE7VjLXgI3VItdpANG6VjmutVhji%2BEFUBMY5GDue3fMNHZnlBgEwhr1%2BlpZ%2BLskrwnMI%2FU3qdS22NBxyUAghWNcmLjLF6tgPbXmLokQgBZVM%3D\"}]}\r\ncf-ray: 9e292d48287b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e53ff3a90e8c46f183c2f76f5e56c725","sha1":"496b59dfa36d361399419112394dbfa2d638ed44","sha256":"e1718d832724f003ff97f4b2e5210ef48399cc992b00efca2ca3a17f75ccc908","sha512":"afd69f9c50b857827d1e73b101c64b058c2a537fa94272fa0041cf084ef3bb3d6ec2ee63c9db2a91252bc807374dd0821d9436469590d7eb31f4e6bce2e5be6d","ssdeep":"192:u0x5yqAxbG8Nz+R4y42CMAAq79NzpdyjfLFtCmkdPc6lI1y:u0vVAhG8Nz6gMAH79NzpQLfNkdU6O0","tlshash":"61122f074388ebf8bda98228d51064d979d5ecdbe430f2d4bb6b1442c58c4d5a68c7fe","first_seen":"2023-05-22T20:26:51Z","last_seen":"2026-05-08T16:40:53.482168Z","times_seen":543,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/usdcarb.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/usdcarb.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:35 GMT\r\netag: W/\"957-64df059de6614\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KeYLnkHy6eT%2BAp3nnWDVjrEfbIIh28wPL0VJMCq6atHuWs59yWYvzB1HVu2mjDG9BdwZeXulNU6fPD06Gul%2BPnsF%2Bqt5sxJ%2F0HgR6Bg%2BZSIiBwyY2fh0pTyR3XvdFYKvbagV0En4TJIKXnc%3D\"}]}\r\ncf-ray: 9e292d48789e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04718d4bd8563bc973c42ec327721c90","sha1":"dafb67871836f9a57c2406668e0b30117aa5d75c","sha256":"6b3bafccf0606dfda24d8a260da11509827e3a536d911bf9a74f2c3d6f4dfdb0","sha512":"3292511798b47f488491934ee96641097a16f8571d1cdf396287282d7bc960dab879f5968a355bfccdfd7ec39b7fc5aa6bb3ad6a3df4e864832164e04348aa26","ssdeep":"","tlshash":"e141edf4a21d52bc0d4b8bb89b3698746b1f587ab38a02342d9fd2b091074fdd9d3894","first_seen":"2025-08-08T03:14:58.329492Z","last_seen":"2026-05-07T01:34:08.511615Z","times_seen":484,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btc-swap-no-kyc.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:42 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 414890\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-14T16:56:28.160066Z","times_seen":178346,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":214,"dns":4,"connect":9,"send":0,"wait":3,"receive":4,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/get_rate.php?from=BTC\u0026to=XMR","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /get_rate.php?from=BTC\u0026to=XMR HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZncat3tRVDCenjIh5f2mdx6EL%2F3vU0q2Ab1lcS17QB8c1jRaOTfcXumEmCn0neK1vRGk3fBnaBNKO954KwtE4zSHvN%2BXoRJlgvl0j9EYYjdbePXSSI2oigzz%2Bn1s0OreZ5d1nvX%2BjZgP8w%3D\"}]}\r\ncf-ray: 9e292d4b99ba8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"db1f0286e072b039a3a62569e0a76b7e","sha1":"1dd811d4aa5aaa3b009c9135c44b56bc689965b8","sha256":"677efa203bea9c351690ca5e17a61285cdbbffed45413762a2da102276fc3f1f","sha512":"b412a900576ea801d3229c8e38ef6a902b7390ad4ec91b0d11b1cdd84d85dd84e08b89d551ddd5fc412f37b4da2ee0f2cdfd4b8a58fdd28a1343ac63cb873fe6","ssdeep":"","tlshash":"518000aaca08280800020aac088282000802003a802e228a28b88ec08800000c3bee8a","first_seen":"2026-03-26T21:16:32.583606Z","last_seen":"2026-03-26T21:16:54.291992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":944,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/eth.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/eth.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:14 GMT\r\netag: W/\"541-64df0589f4a6c\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxkeWFwpbjq5NRKMI2B7qn8Cl18UBMBRmLojM0qja8qyebNHbnUhD%2FhK4sInyJqVlaIFEGDJIS7kz7pg2h%2F1TWG357BLY2uUgDzWu4k2OU6410Xn3EJB7aGlXrlmjHyeSpqp91IZ3OZfI7s%3D\"}]}\r\ncf-ray: 9e292d48086d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c19954628081bf6fd772fa0d0819547","sha1":"9c1d03cc04bb9d2e2f8577ad561abb9c9ac9dae5","sha256":"066b2a60df66fbe2c11bbf7d37201552fd27e4edca73cac4a3e7ebda3ceb2486","sha512":"3f40c39fa2e06194f6957ad2bb7cf6c752dd9ad12eaefe891a56380496d85f383331fc4c557b42f3cd897bdfa02c87d4f27ff457b1c11ecdbba6053ff2549ff4","ssdeep":"","tlshash":"fc21eef5ad9e6991c5fe83b4b5fc91532853c0cf008a0880fac07681ac066fe4e42adc","first_seen":"2023-10-24T01:06:33Z","last_seen":"2026-05-12T06:26:42.674726Z","times_seen":785,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-swap-no-kyc.exchange/logo/sol.svg","fqdn":"btc-swap-no-kyc.exchange","domain":"btc-swap-no-kyc.exchange","tld":"exchange"},"ip":{"addr":"104.21.76.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-swap-no-kyc.exchange/","date":"2026-03-26T21:16:31.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-swap-no-kyc.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:05:10 GMT","end":"Wed, 24 Jun 2026 16:05:09 GMT"},"fingerprint":{"sha1":"7F:0F:6D:B4:37:39:61:00:58:AE:BE:54:19:C0:FB:48:82:06:3C:30","sha256":"FB:B1:56:33:55:56:FD:D6:85:25:2F:7D:AD:AB:B7:B7:41:87:0F:F0:26:81:F2:53:7C:41:79:BE:AC:22:7E:15"}}},"request":{"raw":"GET /logo/sol.svg HTTP/1.1\r\nHost: btc-swap-no-kyc.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-swap-no-kyc.exchange/\r\nCookie: PHPSESSID=r38apdhpvh338jfvtoikp0tbrg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:16:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Mar 2026 17:02:28 GMT\r\netag: W/\"6f9-64df0597649a8\"\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Upw5HUsSvqIVJY8Z5BBtpMpKKu%2BLimPbPFI6rwfhk7aYb80PmcGXxB%2FhZRWM4MBqGpW8kByXLelA5auhfzmgxp88N1Ybzxk0Me5CGPjtTSV2gN8CQXJnQ3HX5vHUXxflWKOx29GcvOsA19w%3D\"}]}\r\ncf-ray: 9e292d4818738deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e6fecb2c83dd517ad34f5851b99ca82","sha1":"1f08ca68f7b9d5810f4048c90119b5f30a1d13c8","sha256":"767bd52ed4f4764f27243d78f441d6690b2024d5526044e06e55f49b8008d47a","sha512":"a932d777e8766aef3c077f636a6aa361d8afab191185092d28a353b765b8a86c26f9a71d611fa6d85d906a6ecff70451615fd8316947728aa63bd3cf0fe587de","ssdeep":"","tlshash":"b6310215e51a68bbf415c24ccee1197523e802eb9062d7e091a17e3ef5acce1001f3dd","first_seen":"2023-05-11T17:52:35Z","last_seen":"2026-05-12T01:45:51.299723Z","times_seen":711,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"btc-swap-no-kyc.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}