{"report_id":"c718449a-f10b-4435-aa5e-92d8cd8b221c","version":0,"status":"done","tags":[],"date":"2026-09-30T18:10:14Z","url":{"schema":"https","addr":"swiftkargoport.delivery/","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"swiftkargoport.delivery/","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"title":"SwiftPort Delivery Delivery and Transportation","dom":{"size":47131,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9791)","md5":"6009691300654773d5e9c2cf2ad3c85f","sha1":"6f5187f52853a371ac5ba64d0922c4f6937ef952","sha256":"fbfacf0221c5eae04a8a39a315186096246f8168daea627a16b785e09be1c8e1","sha512":"057a2011b11d13fb4bb3ea4cf063f4ebaf6b68eab02c155374463432bda1b5a3acd393b2c296302638c1ed696b30e38143e3db9b7a363ced5b9d62279c9def4d","ssdeep":"768:8OIT+2ILjzesAvcrM8M1RlGy/uunrszVYUj7Qz9:c+2I2vcrClGeTruVr7Qz9","tlshash":"5f23222168e0982641db45c864b21a365af6c34bc55b0588ffbc8bf91fefd6dca73244","dom_hash":"domhashee998fbabcd566dc6efc2fd6df801b42","first_seen":"2026-09-30T18:10:40.10396Z","last_seen":"2026-09-30T18:10:40.10396Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"swiftkargoport.delivery/","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-04T18:10:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-29T06:54:31.365163Z","alert_count":0,"request_count":4,"received_data":5948,"sent_data":2134,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-27T23:02:15.547295Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-28T22:01:00.454273Z","alert_count":0,"request_count":5,"received_data":299101,"sent_data":2971,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lh5.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":6378,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2026-09-27T20:13:50.076832Z","alert_count":0,"request_count":1,"received_data":51570,"sent_data":631,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.businesstoday.com.my","ip":{"addr":"104.21.40.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":912432,"first_seen":"2019-01-22T13:34:19Z","last_seen":"2026-09-20T14:46:49.922957Z","alert_count":0,"request_count":1,"received_data":107826,"sent_data":590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-30T01:06:43.135174Z","alert_count":0,"request_count":1,"received_data":32460,"sent_data":579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-27T23:35:58.732281Z","alert_count":0,"request_count":5,"received_data":48619,"sent_data":3109,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":22232,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"apicms.thestar.com.my","ip":{"addr":"13.249.8.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":892869,"first_seen":"2019-07-30T22:36:43Z","last_seen":"2026-09-20T14:46:49.728094Z","alert_count":0,"request_count":1,"received_data":105374,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"swiftkargoport.delivery","ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-30T18:10:32.633462Z","last_seen":"2026-09-30T18:10:32.633462Z","alert_count":110,"request_count":55,"received_data":2769509,"sent_data":68335,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":4,"received_data":138910,"sent_data":2309,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/contact-form.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"25bb7b304b1e5670f12efecc20d5cdf7","sha1":"11eae764f91eb82846c64e6625351d27e428c0f5","sha256":"648a71e7545c79f8aa8dcbfb2aa601894f92c4074c9b507625212deda8fd4738","sha512":"366ed7a98dceb1e04a89f66cca690ea2ca6beb4e9b62e09754449f4c4920b42b98c801d20561674c8e0b9623ac4ccc6dc66779fe4893e63661c56d25aec972d9","ssdeep":"","tlshash":"e431814daefd29a5107372b6a17f22019937c11f6a092d31fe8c00b80f9d75d76a7b64","size":1679,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-30T18:11:03.038773Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.fancybox.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"921e9cb04ad6e2559869ec845c5be39b","sha1":"1cf3d47b5ccb7cb6e9019c64f2a88d03a64853e4","sha256":"6c78ce6b6d1928630b903084ea9d503643f303ba05455860cc7cd17f7687cc65","sha512":"91ee03bd3766b2584c70361ad0ff4729cd2745fd661089c077884d1e6c181b6c2244ac7ed1c94a4cbf74f8101e9d4c54e2af52c55f35586a0675fe12df5e7ac0","ssdeep":"768:I29rFqkxIWVSSy7DkA7DxQPgsvtrJ68ov6iIMdl7YjSg/bEfOKk53tlUgb:IYFqkxIWVShDlDxQE2Al4Efi53Pb","tlshash":"af23a8d0f7ec317bc67620069d1e21ec613ed4329b0244bbbd9c666857c46ec83a5fa9","size":48706,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-09-30T20:23:13.783604Z","times_seen":3378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/waypoints.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","size":8044,"data":"","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-09-30T21:45:23.137893Z","times_seen":13145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/bootstrap.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"09224359ccf8277a46de23c00d2a0b29","sha1":"cc33f3b4abf1ff45edee5dae62a1f3fd0dcc24d4","sha256":"08bdf8113639c5ce697e6eba88ceb1ed3348e82168a0e0dc0a75eca428348bce","sha512":"9d63ed482afe1119a0681c7a49a168ab5e3c67db211d1fcda83bf07a7d99a991f2dea2553aac3978fb0868d81b56ffc384d29a0f599f69001edfddfc61a9b380","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm51CoFXflR8Gf3ZsbQ:4875vhqKOvlp3ZsQ","tlshash":"fff29646b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","size":36822,"data":"","first_seen":"2023-03-08T20:10:42Z","last_seen":"2026-09-30T18:11:03.015998Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/bootstrap-select.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"72cf3ba80ac56eaf755bc760dd46924b","sha1":"10aaa874ab08af30a6982e80e097159eb55ef4f1","sha256":"6eadb9f319f0dd5b3fa94e780f0ee531dbada3ce7a190c187131483cece9016a","sha512":"7fbd0a761bb81609c43663e1d3b6c2629c42dc3c77fdadfb219b38f766212bcb049cc5e67faf611475ef232713395bf1909fe74f5427e164ab7e66e949c4f3c6","ssdeep":"768:9kHkK3JV9V0UCAMsl0xVQZc9PfYp10+6Wat1HrRnu/w94:9CJr9soA9Pwp10+6Wat1lu/w94","tlshash":"cc43625a36fb2230817b20aa5e9f5448b135812f5806e9293c5d43c86fd4938b6f7ff6","size":59424,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-30T18:11:03.002757Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/bootstrap-datepicker.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","size":13776,"data":"","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-09-30T18:11:03.017494Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.counterup.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-30T18:11:02.996774Z","times_seen":13442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.validate.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a4a78977c67935d388e92928e6b735","sha1":"87b58387cd22f3280a081e30470648edceb4e4b0","sha256":"46dc5b21ccb40ed8e13a10b2e62a01648a841672091671f6b03bee034a0d00d4","sha512":"4b100b768f19463bcce2398099017df00a2cecb4e3eb720232578bc75fbc5c351a5af34f7b437dc879b614bf47951b70c02db80880af0b419127c4ad6fc56362","ssdeep":"384:QeOXcp7Lm+dmr9qhk0XuExz9Bcd1Jny+0xC7WpdOC8PGDm9KLNKI9ci9sk:dfXdmr990ekpqJny+UO798NBc8Z","tlshash":"d592b94d7282b04a5b9620f5a45b560ba1f259b8600ce03cb5f8d4d2fdf8fc95167fb8","size":21067,"data":"","first_seen":"2023-04-05T08:37:20Z","last_seen":"2026-09-30T21:19:11.390987Z","times_seen":4775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-09-30T20:16:51.431996Z","times_seen":28417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.stellar.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","size":23282,"data":"","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-09-30T18:11:03.001076Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/slick.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"faa076ceaf93e2aa236a18ecda59c041","sha1":"ac1be3a3b1fb3fc3007796baa121b4fa1ca39977","sha256":"39edf75244e2496d51974fcf99fcc03ca37d2a837385a1a6ff921f9ce97e7d49","sha512":"acc7201eb6dbfab1ccea61c8b9ad91c6ce4a8038912ac6b01dccd9028461512936e1d7cba1af71acad1cac0431c93fde87eb285302e71d24cef45251421c8eec","ssdeep":"1536:Lu4rWZaGI2RnhibVibro1leYJATAY4sW2AF:Lu4rrGI2RnhibVibro1leYJATOF","tlshash":"a273ec0b55f2131294a731b96bdf8028b3ba91275504ed9dbccc43c5afd45288feabe4","size":79234,"data":"","first_seen":"2023-03-07T13:59:13Z","last_seen":"2026-09-30T18:11:03.025322Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/masonry.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"85ef736bbfdf0ce0c537caca4c1f29f6","sha1":"b0dc16d9bbe017437e0f116c425c4e20bbd4bc58","sha256":"694749e85b4d7726dc87795b3783f8b0d64513b8eb90a8170e5db9ef2e3f4c19","sha512":"6a234d647e417447aed9fafa95bd727f848287bc533ed798612a95b397f56f344716906dd89c9b8b05b0eca3ff844455c9331c74170992a3b1a175a786769050","ssdeep":"768:f9+z0BFXYKby+HvOqKvVOkYtkdEvWBzigMPI0:fgKbbOlIkdEvPgI","tlshash":"f7d2c54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","size":28969,"data":"","first_seen":"2023-03-07T12:57:28Z","last_seen":"2026-09-30T18:11:03.00213Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e07202748f52b275a366dc765dedb884","sha1":"8768bb00ab50be7dda6103811f5cf3ee6b2a11bf","sha256":"9561c041bc10fdca6bd46059bcf9ab2c596a4251efe7260a00979ce2ab0663c7","sha512":"d550d20f48c2998189902c4aa1c7707eaa0ae68b066848cc8efe56806c6f8efb636713a0f66f7aea54dde10af65856ea6ddc0cfef77456cfd5d4feacba13c7c5","ssdeep":"3072:mL9aWR+K+zPZCPzb+bk1fRz62/OlDcpBi4unoLd+X9hcxBZoyZR:NzOzvVwIuTKB","tlshash":"c254e8ddb29670b79363f4a5513f004ab13b68a5f8484dacb288d8e26df4909417bf7c","size":292791,"data":"","first_seen":"2026-09-29T03:06:52.258789Z","last_seen":"2026-09-30T18:23:08.410148Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8be9ae937812c44593cbc5803a4d1f38","sha1":"0c00ddeb1b4aaa75896ea513060d9fca7cdeb984","sha256":"89ee5b5a770d133a1e1720fabf437d4d4e1664aeaccf0a60d830554e2d7c9f97","sha512":"0e934a784a5f8f4853d100ba1b89417cf33e2f3ad31cddd9f27c387d36effefadedcd402e3940624ac8954b427c216ab5cdc77f44a727ad8bd3f5d48958cf1f7","ssdeep":"","tlshash":"df5106998876d0d6c4436c29cfaf927932444037ac11dce5bedcd912ffb051ab64d5d4","size":2990,"data":"","first_seen":"2026-09-30T18:02:23.865521Z","last_seen":"2026-09-30T18:23:08.349796Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8256caa03b97032d6bbc3ec88781810d","sha1":"b8059c446f040b9c780b5504dad3d9d30786191a","sha256":"f67bb20188531300cbbb4625d26bef446c45cedb9730f80b47d15a8549318984","sha512":"cd249f110f033881e85118b20737f3a5ac294ce22bfc0ee83ce55b04f029159d2f457c1560ecd3672d77c28ec3ebbae06c2007442b4426d75562f59cd26ce10b","ssdeep":"","tlshash":"91c09b47f571554b0497f105d387448c7178450a453a4e25375d50ca3fb3f9d174d1e8","size":148,"data":"","first_seen":"2026-06-10T01:20:08.460679Z","last_seen":"2026-09-30T18:11:03.042068Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"75a92bf0b7262ea95aeb905148bbdc0e","sha1":"878ef66813fe4ea27c7a26d305cfe8725b60719a","sha256":"551f05790db1227ade331411938bf15f6eef4de8329649c7d4f40f38c493ccc6","sha512":"648224477ebffcb9bc340f550d5a4f0e49dac46b2a95833fbd4faa0aec48d78d566322363bb443a58de62a9917a0779f2054f51074809815c7401e24558b1bac","ssdeep":"","tlshash":"5fc09247f5b0164b049ae20ae387488c72bc8509463a0e292791a0ca3eb3f9d070e1a8","size":132,"data":"","first_seen":"2023-03-13T22:54:55Z","last_seen":"2026-09-30T18:11:03.042671Z","times_seen":1704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.form.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ff23d156a15ac9eba83b6f571abd83f","sha1":"63b1ceaea04590b9611d3ef6dbb588b365be4559","sha256":"14b30a934e36cdfc5301709bf515adc31e060bd7275eb056964cf7d2ed6e7550","sha512":"5ed814a05a01362c292dbb7bd2ee41d8bf1f1dd6fd534ff63b6a1c1699d45e75739beedb068995da687c78fb365ff465940bd88f1db926260bb4d3f7b67a31ce","ssdeep":"768:4hN+wDMgNAWo8/e9z4UA+BtX66+PZ0s8Oa3ij6lOTwIMuliMIzMJVVRFRLRZzYih:cUwDMgNAWo8/e9DBaPZ03FSjCOpliMIG","tlshash":"de03a24a7aeb12a2192334b90bef91497639d0171208dd617d4c53a06fd4db4a2fafe8","size":41095,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-09-30T21:19:11.362421Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/scripts.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d09cf601baf021286e3f8e6c232031b8","sha1":"d4e641ed29edc7a48df150e8ec65dbf1ce82d12d","sha256":"b7c3dc18637730cab73a74f68f0225eff4f00c3606ebe97dccebf432f1d08009","sha512":"43eb78ef42baadc46d0182719c51a1531189595ba3e0ad5813776cacd66397b2a4fdef9d4b1343f32594e9e04571ebe5558e4ccd30fba482e2f3e87a18ca9e07","ssdeep":"","tlshash":"4541021bf358b723703f761845bf70c6133f10179a055a15fbbc414a2f9a62e24cae49","size":1883,"data":"","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-30T18:11:03.029219Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/fonts/ionicons28b528b5.ttf?v=2.0.0","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.921Z","timestamp":1790791781921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/fonts/ionicons28b528b5.ttf?v=2.0.0 HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/ionicons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 104496\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":188508,"size_decoded":104827,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"24712f6c47821394fba7942fbb52c3b2","sha1":"1b0a0de084905946a20300ca8c354865dec46764","sha256":"2ba7f20b1d8990e17a47fe3d88e4c766628aaa2baf1dd30fca0a0db59836f5f9","sha512":"e61d99095429861d335b7f1fa720d63ce3a5e7879aad0c02937b7a8367b8107e4b874637b3fa4f5590f8f3e5a68ad8c37d646e6cb315815af8b962dee1cf2777","ssdeep":"3072:ZevphGNEm96ksZlU9WZEwXnwY3Xv8KLyVT8s+mW0uu2r9FsysMgWU/:ZBEm9Z26kXWb+mN+cpX/","tlshash":"2f048e0bf7cfda4bd125a67e44f69b1319a8d0106e2353dbebce364994e76c40c6a0c9","first_seen":"2023-04-05T10:17:13Z","last_seen":"2026-09-30T21:50:37.668734Z","times_seen":13665,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/testimonial-head1.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.410Z","timestamp":1790791779410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head1.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25121\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25121,"size_decoded":25407,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"a79c56d2a05ffa8052f488307ffd0446","sha1":"6fa7df5357c0dbfdf5eb37c8068ce383a7302989","sha256":"38ae7a11a291e120978c533d0ef49fd974dae528741939afa9e51d960e79468a","sha512":"3a077131397a647fd4c6a37dbccc6b00d57f9c203da1b7975018339c82972f8836737ea92795f51980acd0492435fc89fc8b4450acaf24073c930fd810bf241d","ssdeep":"768:6mcuerbimgxjZ3d54lBfcye/Yny6Tjh/opF:6mcuQpkjZc9ssyY9c","tlshash":"75b2e169bc71114b405fc9076cba10ffe464ccd558c064f8a989ccec56bc07aa6d7aa5","first_seen":"2023-12-20T09:18:58Z","last_seen":"2026-09-30T18:11:03.02622Z","times_seen":72,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/main.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.171Z","timestamp":1790791779171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 103\r\ndate: Wed, 30 Sep 2026 18:09:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":263,"size_decoded":431,"mime_type":"text/css","magic":"ASCII text","md5":"7de6c99397aedc3b2c2fc395bcdea0f0","sha1":"7ad6ae651f4682294f6671bcacffcbad2c1f3b30","sha256":"7441eae5addc0cbd5f3a2a9b301025eae51f2804174f11970f54843865add5ab","sha512":"7f5a9851ac2fc4bdd7a0d8f11804caafb261cec88a77541d3695ef4bd846e69ec4a892f6ebde156f8762c90c2e09eb2964874254925faa7bf3b28e495af0ce22","ssdeep":"","tlshash":"c7d06c07cd00334760f28c946209336077f9ad194ef6f0d8017b57340bf8a7aa8b9381","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-30T18:11:02.99972Z","times_seen":73,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/slick.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.394Z","timestamp":1790791779394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/slick.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13116\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79234,"size_decoded":13374,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"faa076ceaf93e2aa236a18ecda59c041","sha1":"ac1be3a3b1fb3fc3007796baa121b4fa1ca39977","sha256":"39edf75244e2496d51974fcf99fcc03ca37d2a837385a1a6ff921f9ce97e7d49","sha512":"acc7201eb6dbfab1ccea61c8b9ad91c6ce4a8038912ac6b01dccd9028461512936e1d7cba1af71acad1cac0431c93fde87eb285302e71d24cef45251421c8eec","ssdeep":"1536:Lu4rWZaGI2RnhibVibro1leYJATAY4sW2AF:Lu4rrGI2RnhibVibro1leYJATOF","tlshash":"a273ec0b55f2131294a731b96bdf8028b3ba91275504ed9dbccc43c5afd45288feabe4","first_seen":"2023-03-07T13:59:13Z","last_seen":"2026-09-30T18:11:03.025322Z","times_seen":223,"resource_available":true,"data":null}},"time_used":1489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1431,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/scripts.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.397Z","timestamp":1790791779397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/scripts.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 748\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1883,"size_decoded":1004,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d09cf601baf021286e3f8e6c232031b8","sha1":"d4e641ed29edc7a48df150e8ec65dbf1ce82d12d","sha256":"b7c3dc18637730cab73a74f68f0225eff4f00c3606ebe97dccebf432f1d08009","sha512":"43eb78ef42baadc46d0182719c51a1531189595ba3e0ad5813776cacd66397b2a4fdef9d4b1343f32594e9e04571ebe5558e4ccd30fba482e2f3e87a18ca9e07","ssdeep":"","tlshash":"4541021bf358b723703f761845bf70c6133f10179a055a15fbbc414a2f9a62e24cae49","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-30T18:11:03.029219Z","times_seen":72,"resource_available":true,"data":null}},"time_used":1486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/icon01.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.408Z","timestamp":1790791779408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/icon01.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4225\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4225,"size_decoded":4510,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"9a9f3e65490771d550cbc99785d6fb1d","sha1":"8854a1b6a4c309ef97baef5fee5bcc38495e1fdd","sha256":"ac20cb9c0e7c70761c39d5a3aced64af66c91d16d266543104231a4a35886ced","sha512":"1edd1f0501e3cd04fa7a9e02fcca0e429853b270c73d2aecbe0d0240dde7456de72bc7ab37e4d42f1f5890bf5d95c122876c89a8de743cc7cf241cf803567550","ssdeep":"96:eSeQ/l2zjMUNld8dxPGpW7KHK8sm/ZYbWKJl5VPTf:NDDEIPPGpyaIjVPTf","tlshash":"39916fcd20d2c865d4d5e14274ea9a1fed7e1ed1ce70a83237cace110d8d92a504c7cb","first_seen":"2024-08-20T14:43:16.010395Z","last_seen":"2026-09-30T18:11:02.986947Z","times_seen":74,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/logo3.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.420Z","timestamp":1790791779420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/logo3.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30699\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30699,"size_decoded":30986,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"95f6cea878e246dbd3494fbe84e771c4","sha1":"59f4c6e8f014915c636647aa9ac281cbdba5430e","sha256":"ab27c2f1d5f63bc3feacdf8ac09983b6802a0000c61fd3f29b830d71f2fdc5b2","sha512":"82532ef145d82529e8477a3bb28c731448fbad7c8541b8c4cf4c98683b5fdcfa62ce1ff75856b0493ba9d830666d9759efc7e1fca35c9ccb0c5d6d202411b820","ssdeep":"768:QrEYyeruR/bYyeru8GK/bMbsygxK66zakzV6MA:z66R668G3bOXku","tlshash":"c4d29d34af9baf23f9d0d1bc44e4c7e2e3236a68a7b35751746c5122b3716d11a4c34a","first_seen":"2024-08-20T14:43:16.023188Z","last_seen":"2026-09-30T18:11:03.036292Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/bootstrap.min.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.454Z","timestamp":1790791779454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18377\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122559,"size_decoded":18707,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"9b9d87c09c0e00c7dbd7b819959c5fc2","sha1":"c89d14a22098a5acf417e38e64a5fb9db52bba93","sha256":"8c73e31d4ae02a7a5a6d128c9e5b78d842dc8c2c8fa98e74178e8bbfda1bf66d","sha512":"8df866276db3bc97286828cb3e75726f0954d0b6f30030df370a8184afec6ad8b44efafc629cadf70638dfaa390350dcec27c2905b40d7816f8005e01805a216","ssdeep":"768:ayHGxw/jc/QWlJxtQZIuiHlncmzI4I8OAduFKbv2ctm2Bm8JP+eckOvS1Fs:sw/o1wIuiHlncm28lDbzzPux","tlshash":"02c3d7a0f11031ea7323c55a71d0ed872259a153e56a4eb7f22f25d88f886cb1773f1a","first_seen":"2025-04-17T05:23:49.783523Z","last_seen":"2026-09-30T18:11:03.037985Z","times_seen":63,"resource_available":true,"data":null}},"time_used":2331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/style1.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.169Z","timestamp":1790791779169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/style1.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 836\r\ndate: Wed, 30 Sep 2026 18:09:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4041,"size_decoded":1164,"mime_type":"text/css","magic":"ASCII text","md5":"6fc74ad480d1ce1725aed54e44fb904c","sha1":"80e0ced78a3e4d9b08b9b6f027fde2652555796f","sha256":"93a0c0da3f8780859d6ed58c87af56bcb5f4ac75f7461b01c9ddafa8ef8e409e","sha512":"ff99bcea09116571bf9076f7ceaa85a266120d5d48217d92a7e377b9fe90f185a75f5785bc0b1472e2ba424c25032b4879ecef769418470899353806289c633c","ssdeep":"","tlshash":"6b819d939ea30546b42fc5583beea768d32ca043d816cf3c379571984f881a8516efc6","first_seen":"2025-04-17T05:23:49.752581Z","last_seen":"2026-09-30T18:11:02.989997Z","times_seen":57,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/path/to/font-awesome/css/font-awesome.min.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.173Z","timestamp":1790791779173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /path/to/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.2.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 419\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":950,"size_decoded":676,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"ede7f55dedd4efc2b827f98b0c4921fb","sha1":"e29c231e7b8258f2503d4fddad9e3319be45d83c","sha256":"e3374037df857482e9664bf058d693147c2a9ae4d15b3563959463783e8681d7","sha512":"7b307ee90e0777463116ea4b5716de5786f74e8e9f9f633085efd2159a2f17a174f1b858a5f530e44bb69075f0c857373aebb599d6e464e1702dd70615576926","ssdeep":"","tlshash":"2111443b84441aae1300c162b015366cc1ffbf377b423461e1730565afe86c0c4bf099","first_seen":"2026-09-30T18:10:40.113246Z","last_seen":"2026-09-30T18:11:02.985577Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/bootstrap.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.382Z","timestamp":1790791779382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9432\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36822,"size_decoded":9689,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32040)","md5":"09224359ccf8277a46de23c00d2a0b29","sha1":"cc33f3b4abf1ff45edee5dae62a1f3fd0dcc24d4","sha256":"08bdf8113639c5ce697e6eba88ceb1ed3348e82168a0e0dc0a75eca428348bce","sha512":"9d63ed482afe1119a0681c7a49a168ab5e3c67db211d1fcda83bf07a7d99a991f2dea2553aac3978fb0868d81b56ffc384d29a0f599f69001edfddfc61a9b380","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm51CoFXflR8Gf3ZsbQ:4875vhqKOvlp3ZsQ","tlshash":"fff29646b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-08T20:10:42Z","last_seen":"2026-09-30T18:11:03.015998Z","times_seen":110,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/logo5.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.422Z","timestamp":1790791779422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/logo5.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7891\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7891,"size_decoded":8177,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 236x141, components 3","md5":"ebb7c48d1a323f46c1ec22aeb2f3eda8","sha1":"fe8944e2be25e26a5df92e82bad8a3d3537a0607","sha256":"e410c33e2fc3d37fc45a9fb7b7460df2b72b9e362a881dd99b11c6cb59b64389","sha512":"4b0e00b3674e2e98b86cf88f8018ecb342aa558edbe4d1822894018da96372917d6485d8e03c4f5bb6d7e23f9c64c7cf3936ac585e4408a5d49c1894959df48a","ssdeep":"192:9O1G/PROIBNOWYFcJrxvMhqBzuEyfvRnGa:9OoOIBINFeJMIuEyJp","tlshash":"31f14a03a760ac70fbeded703bc3d2132a0f99a5637bdc5650a606cb7661c9e85056e1","first_seen":"2024-08-20T14:43:16.020209Z","last_seen":"2026-09-30T18:11:02.982287Z","times_seen":73,"resource_available":false,"data":null}},"time_used":2263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.920Z","timestamp":1790791781920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://swiftkargoport.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181036\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-30T21:35:54.176117Z","times_seen":311376,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":18,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/icon02.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.409Z","timestamp":1790791779409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/icon02.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3554\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3554,"size_decoded":3839,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"d5dc7d9436ddf91e2099ccf36bd0c308","sha1":"6f9debdc8d78bbcd7ad76f30b27577cfd726b0c7","sha256":"6868d6250d4332df2581e118c6cd2f8b350ef204e391857ccb5fde8ed9059729","sha512":"979d3d6870e04c826ae6ef08e1855e6f02dca83a699034434d974923544b3d5658b30cd832dd62c4f3b55685c72879f1fb1cfb963f79ea4b19768970d2056b84","ssdeep":"","tlshash":"e5713b76b4036812b66cc2d676eaa94fad1207c2a4c4ef9a2ccf0db64d19ee147585c8","first_seen":"2024-08-20T14:43:16.046448Z","last_seen":"2026-09-30T18:11:02.981569Z","times_seen":69,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/testimonial-head3.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.414Z","timestamp":1790791779414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head3.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22985\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22985,"size_decoded":23271,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"b885947476ccb3f7233bc991ab0949ac","sha1":"e02a42a0ada10e5610a3b9bf314d4ed3e8b3f366","sha256":"97895dc7017c814cd9b49a7ddf42e6e96b39d3932cbe4482498da7750c88ba13","sha512":"af196781e414afb44e82e13aeae2ae9e6ac900cc28ea50e24448e9bd719730a525fbc17736b4534f63272dfb26b279af28c7f1544c3597436223eeff6d7f44fe","ssdeep":"384:Qz3zeoh7w76WAWJoAgIt8Ll6mGvtck/uZqgy2z91EkNCAJ2Xr/MeaiHyOp:w3zeUs6WAsoAgIt9pvmkZgr91EkN32Xh","tlshash":"68a2d07eeba0ce5245af908e6c9385210c2547801b629cd3f897cb3d4e1ccf6646ca9e","first_seen":"2023-12-20T09:18:58Z","last_seen":"2026-09-30T18:11:02.999041Z","times_seen":72,"resource_available":false,"data":null}},"time_used":1469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/logo6.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.423Z","timestamp":1790791779423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/logo6.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30470\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30470,"size_decoded":30757,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"c4785ad5ab08f3a78529c350cecffa1f","sha1":"a0a1512277f916ed953850ea78b8c79c39f67f7a","sha256":"01bdc8e033dc77f31c844e95ec87c60df024596cfa3b3f1420bd90fdf8263084","sha512":"e8bdae834ac6b9f1d8323a3ebfff14be036b2753f20d101e1b8e17733609ecc9f7900de2013d0ebfd8dfc84699acc7d307260c05bea0fa73322f5bc0f0a2a3d2","ssdeep":"384:YrvYNg7/M6U/ijYNg7/M6pGnjK4Pn56sHWFOzOPK4/VowEZt:YrvYy7M//gYy7MSG9566WMzWmwEZt","tlshash":"04d28e70bf5aef83f9f1467881e8c7e1b3526b28a7b3114a385c5515bb76ac00d4d34a","first_seen":"2024-08-20T14:43:16.052218Z","last_seen":"2026-09-30T18:11:02.976627Z","times_seen":73,"resource_available":false,"data":null}},"time_used":2362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2261,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/et-line-fonts.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.446Z","timestamp":1790791779446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/et-line-fonts.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1540\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7074,"size_decoded":1869,"mime_type":"text/css","magic":"ASCII text, with very long lines (1512)","md5":"75549347f663e5380d18409dd6259982","sha1":"b491327511778957e8505b3b4dea9bd40eba28f8","sha256":"03eb685e0a41eb4ac4f561e56f4fedae8dcf10fd6f94a1384d346cd1a4a1b60f","sha512":"18e6478f44d9a99783b0af05fb322d12be0e96b00b7df8a36da76141e856e30e64ccb9b363251980429e3a8afcbbac8aaef47b8932060dfd2f7058773334960a","ssdeep":"96:G+VDsd9iOV4esZ7sl0jF8v1bYpdetWNSX5KBbZdf7TXvkaZQvwKjY8AzY3Q1Kj//:Lc9i8sZ7sSjB1opDHmi","tlshash":"25e191eced1da9a25780e4d16b417a00df0cb3299ccb2d5bf417b82ca7f2a1494d63d9","first_seen":"2025-04-17T05:23:49.770414Z","last_seen":"2026-09-30T18:11:03.01352Z","times_seen":61,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/banner1.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.015Z","timestamp":1790791782015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/banner1.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 174236\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":174236,"size_decoded":174524,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"e480a2a0a8a1a5a9aedf670ced5acf46","sha1":"4de9eaa2955084b030aba0bd5d16ad26c255db06","sha256":"197f05298caf34b554fec3e7c629e8c692c17964b8d5b2912337165c5324991f","sha512":"595e7be327da1c9a17c6db2d6e8ab4686af8aaac15737d4633811c5642ba9d82f99b9eafec7f817a15503dba9e0cd4e6f73c7b3eee3d79c30b3fad3be8b30f0b","ssdeep":"3072:eZOsTJ/nA6HyWNO+mZp5ybdySU015UW97OXW+wQcSurahNNR2LVi4rYmRRMQYd:enTJ/n3HRO+mT5ybdySUnW97OXW+UkNr","tlshash":"56041224e5924d8540adde2347149eaa2af7c1c37150e84b1b2cbbfed29ed88d271f5c","first_seen":"2024-08-20T14:43:16.057932Z","last_seen":"2026-09-30T18:11:02.983906Z","times_seen":66,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/banner3.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.017Z","timestamp":1790791782017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/banner3.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 317031\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":317031,"size_decoded":317319,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"13e00f3886e580dbffc1b5a05dcc3cb7","sha1":"b804d2cd37bc06b4a4479afcf86e01cb6c3ff18d","sha256":"7e32bf0c7e0d656076e5235994b1e7eec91a4ce3ca27d76260c844f9ba249e45","sha512":"36404e7955b5610b3b3280d95d8e4400826cc78b3a83a777fce1e614254c0356d9ff1d92f0437896f6baf96b104a88b4c9f0de0a4edf81db151af6b84fad66d6","ssdeep":"6144:Q/gK2y0pqk+vWTQfVb64D1ntecDszsQXqhSj7tU5T9o7Q9++y0iwWDbVjXnzYJ:2gK2y0pqk+vWkV/Xe7sqqhS/tUtC7eOS","tlshash":"6d6423136f490cd2df869bf8a0c6e384272399bd2174f9db50215cabaf84b21675f0e5","first_seen":"2024-08-20T14:43:16.062209Z","last_seen":"2026-09-30T18:11:02.984705Z","times_seen":65,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/assets/img/bg/06.html","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.018Z","timestamp":1790791782018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/assets/img/bg/06.html HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1164,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-09-30T18:18:23.595376Z","times_seen":7088,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.381Z","timestamp":1790791779381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32389\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95992,"size_decoded":32647,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-09-30T20:16:51.431996Z","times_seen":28417,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/testimonial-head2.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.411Z","timestamp":1790791779411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/testimonial-head2.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24446\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24446,"size_decoded":24732,"mime_type":"image/png","magic":"PNG image data, 109 x 109, 8-bit/color RGBA, non-interlaced","md5":"9c6b95c54d0d86261d8ab833647dface","sha1":"ffca9cc50a0898622f0d08eb4df7357f99b9a51d","sha256":"75c6e4f0fa745ffb1469800638863015d01fcd58c0ad3edfc3a1c22a9fc8f748","sha512":"a6262e2f9208d1c7f99055528612acf3598670898edb8367cfef897eaef3a14a9d7bacb5cc5ddd0163bb0c07c68e1916ff6138c9d9f13cdbb846884377424bfb","ssdeep":"384:/lq9xAYL84KBiKDtmN34rfPljjGYGwSNzZftmXeWAumv0+mFOxL+9s9EVRiJZmft:tq9xA54Kk3x4jwlwS1ZFs6BvjmFUy6VK","tlshash":"b3b2e0f4e7c8f815345eee0d73cde919afd50870e9e4a034ee5fa0197a311b51861a86","first_seen":"2023-12-20T09:18:57Z","last_seen":"2026-09-30T18:11:02.998298Z","times_seen":72,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/logo1.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.418Z","timestamp":1790791779418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/logo1.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7248\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7248,"size_decoded":7534,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 236x141, components 3","md5":"dc7588124dbb02cdedf607e553de86ff","sha1":"965bfb9238604365604f5938fb26f5bb2053b51f","sha256":"fc857bfe140a4fb2a2f400fa24737f1c429620eeb78b7d98cbf94e02aa497c86","sha512":"7afc6929ba75fb6777acc21e81ef780845d1461399b03e49e1df2083c9ce3fb32a47688aee340a3fbf8f3fad0ac3c9b486688ae9bac0ea53c0cf970159f8db14","ssdeep":"96:9Y2osteUZaw6/wIgUoESqI2RcsvdxgDzdCrRMVXxrhmhMDSkkAJeLzXbB:95eu676Zq5RNvwNWMVBsMhkAQLzLB","tlshash":"58e15922a8124c72f7cacd7133d3c02b1a4f868187fa2d45d47740c3b861eadd9a6dca","first_seen":"2024-08-20T14:43:16.050058Z","last_seen":"2026-09-30T18:11:03.035611Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.926Z","timestamp":1790791781926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:22 GMT","end":"Thu, 03 Dec 2026 19:23:21 GMT"},"fingerprint":{"sha1":"4F:02:71:9A:10:A1:1B:03:0B:16:F5:66:E8:99:48:DC:83:30:E6:75","sha256":"94:3E:33:5F:A8:7E:B2:F3:CD:E5:9F:BB:9C:C7:8C:57:67:F3:9C:08:74:18:32:0F:F2:75:9B:9F:36:DB:BF:3C"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 20:15:27 GMT\r\nexpires: Wed, 29 Sep 2027 20:15:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 78854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4818,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-30T21:36:18.112739Z","times_seen":39273,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":10,"connect":8,"send":0,"wait":11,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.992Z","timestamp":1790791781992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/banner2.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.016Z","timestamp":1790791782016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/banner2.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 522683\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":522683,"size_decoded":522971,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x581, components 3","md5":"200eebf058d54c1303a63c330880e434","sha1":"c927db36cf62cd1f06e33624f2646c1348699e18","sha256":"d9bc12d947732cc27271b38b365c58541c4d9b95772b446e26641c375d0a87a2","sha512":"3ce5293113fdbae690a59fd97f9ff0f08cde32807220d1a6656d40c0262310f5aad7492f9851d97c307d924794939f51ea03fb2be504e75ea796a47227d979e5","ssdeep":"12288:jlp+WC7WCi4cW0U0GRY4WWbG3sjexQkxBFSyZkL7m:jQ9jcBNKYf3sGlBFrkW","tlshash":"82b42338fcc2c9c39a5e74ff473f7c665f18af1190039e96744b051b229e24946ac9e6","first_seen":"2024-08-20T14:43:16.060573Z","last_seen":"2026-09-30T18:11:02.991651Z","times_seen":66,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.794Z","timestamp":1790791782794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:22 GMT","end":"Thu, 03 Dec 2026 19:23:21 GMT"},"fingerprint":{"sha1":"4F:02:71:9A:10:A1:1B:03:0B:16:F5:66:E8:99:48:DC:83:30:E6:75","sha256":"94:3E:33:5F:A8:7E:B2:F3:CD:E5:9F:BB:9C:C7:8C:57:67:F3:9C:08:74:18:32:0F:F2:75:9B:9F:36:DB:BF:3C"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 20:28:18 GMT\r\nexpires: Tue, 28 Sep 2027 20:28:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 164484\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-30T21:30:41.499776Z","times_seen":93493,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/icon03.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.409Z","timestamp":1790791779409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/icon03.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3493\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3493,"size_decoded":3778,"mime_type":"image/png","magic":"PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced","md5":"f1cd016a28660394c342d66b402f3c2a","sha1":"58d250f1b4789de2ad2f4d08530464d0887333a3","sha256":"fc8a4d67fb5fc8ec375e244adf86e0bff335c3325875f423fd0eab86883d01e0","sha512":"7980737180fd7513c7cb8e07c0d053ce5ed74584f19d91c2980348b0e3443b6ed044ddbb8ced5a628238d9923eb0b6f70b14f3f4ee3043bba699164ef9df7d8d","ssdeep":"","tlshash":"30715ad5fbd1d2030268c8d719f24427eb2015c56ec0eef2598de81fa9389b17c2a6cc","first_seen":"2024-08-20T14:43:16.020921Z","last_seen":"2026-09-30T18:11:02.997638Z","times_seen":69,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.372Z","timestamp":1790791779372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 30 Sep 2026 18:09:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CO0B; Domain=.google.com; Expires=Mon, 29-Mar-2027 18:09:39 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-BUCKET","value":"CO0B","quoted":false,"path":"/","domain":".google.com","expires":"2027-03-29T18:09:39Z","raw_expires":"Mon, 29-Mar-2027 18:09:39 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-BUCKET=CO0B; Domain=.google.com; Expires=Mon, 29-Mar-2027 18:09:39 GMT; Path=/; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2990,"size_decoded":1714,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"8be9ae937812c44593cbc5803a4d1f38","sha1":"0c00ddeb1b4aaa75896ea513060d9fca7cdeb984","sha256":"89ee5b5a770d133a1e1720fabf437d4d4e1664aeaccf0a60d830554e2d7c9f97","sha512":"0e934a784a5f8f4853d100ba1b89417cf33e2f3ad31cddd9f27c387d36effefadedcd402e3940624ac8954b427c216ab5cdc77f44a727ad8bd3f5d48958cf1f7","ssdeep":"","tlshash":"df5106998876d0d6c4436c29cfaf927932444037ac11dce5bedcd912ffb051ab64d5d4","first_seen":"2026-09-30T18:02:23.865521Z","last_seen":"2026-09-30T18:23:08.349796Z","times_seen":6,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":41,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/style.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.456Z","timestamp":1790791779456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/style.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7616\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44391,"size_decoded":7945,"mime_type":"text/css","magic":"ASCII text, with very long lines (306)","md5":"4858f114d84ac360860ea9a410c65281","sha1":"8b4711038ab758e68993eebb20a68778f85a62a7","sha256":"f69833750f461187bcdf23058ec16df3e9e05823d1db3547bb9723a5befb8fb1","sha512":"30606cc57a9a495e80b74173a5362aa13a4edbffb34c7a9f76815985493339a63a7c786a651b0f52cb3efc050ccc1bb7d77db448579e6b7874d5a37b4c6bbe70","ssdeep":"768:sjjCS0CHYhQ7Q5pdyJyE1kENE2QXk+VqhOT2gNVB7ZHsFcEeBNObQPzlj:sjjCS0CHYhQ7Q5pdyJyE1kENE2QXk+IC","tlshash":"4f136128e192742c75770225bf8297ed717c809bb20b6dad6d7e245ac08e4ef84727e4","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-30T18:11:03.031146Z","times_seen":59,"resource_available":true,"data":null}},"time_used":2331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.925Z","timestamp":1790791781925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://swiftkargoport.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181036\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-30T21:35:54.176117Z","times_seen":311376,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":25,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.942Z","timestamp":1790791782942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:22 GMT","end":"Thu, 03 Dec 2026 19:23:21 GMT"},"fingerprint":{"sha1":"4F:02:71:9A:10:A1:1B:03:0B:16:F5:66:E8:99:48:DC:83:30:E6:75","sha256":"94:3E:33:5F:A8:7E:B2:F3:CD:E5:9F:BB:9C:C7:8C:57:67:F3:9C:08:74:18:32:0F:F2:75:9B:9F:36:DB:BF:3C"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 04:02:47 GMT\r\nexpires: Fri, 24 Sep 2027 04:02:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 569215\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-30T20:39:50.914977Z","times_seen":37958,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-30T18:09:37.846Z","timestamp":1790791777846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; expires=Wed, 30-Sep-2026 20:09:41 GMT; Max-Age=7200; path=/; samesite=lax; secure\nswift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D; expires=Wed, 30-Sep-2026 20:09:41 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 5730\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:09:41 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-30T20:09:41Z","raw_expires":"Wed, 30-Sep-2026 20:09:41 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; expires=Wed, 30-Sep-2026 20:09:41 GMT; Max-Age=7200; path=/; samesite=lax; secure"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-30T20:09:41Z","raw_expires":"Wed, 30-Sep-2026 20:09:41 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D; expires=Wed, 30-Sep-2026 20:09:41 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}],"data":{"size":28475,"size_decoded":6961,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators","md5":"7cfd54275ed173e68dbc2f38afc9c121","sha1":"c76a625868881ec13563c76475f1ef819515e4ca","sha256":"4957de31e69c93dbad85c281b0ba389f918862a55836a234ad91f7d9678d70a4","sha512":"00520909fc3c09ea2fa1a3155dca8113bb433ea6666078d5c5e5e90a5bdb67720eea91690e37464d4fe6c22609c1da0eeafba9c02803f73af037c7f3991edb00","ssdeep":"192:cVOYkCfp4OE86gYr98bp+GX5g5q0I5Ias6qS2GbqLQTYwxqemYIw4DJq7uPIiDjR:cV4SKgYr988GXmL64GOLQ0wEH9audDDx","tlshash":"efd2db2658d1103741f38688aaa12b5affb2818bc79e4e5636ed1bcb1ff7d05dd43680","first_seen":"2026-09-30T18:10:40.128331Z","last_seen":"2026-09-30T18:10:40.128331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":657,"connect":105,"send":0,"wait":297,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/logo2.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.419Z","timestamp":1790791779419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/logo2.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22878\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22878,"size_decoded":23165,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"c987e8b807fccbff3a1deff01d7d8550","sha1":"2fed68d85feb691bbb85e62f95db9f64216bdb9d","sha256":"fb1eb2c16ac313787aaeefd9aebbe107368d9fc18e4c0a8a2f4d62d482b60032","sha512":"1173efed1810d9a6462e6050b15920cd77c4c52a889bee541909d9f2123ad138e554ddea0aa8d13126525253fdfb40539635f1f4868c85792bdce0cf6ff6c0e7","ssdeep":"384:3rfRXHRKy/i1RXHRKGGnRK8/h8/ewpCHJ2H0VkXnJijR:3rfRF/mRZGF8WWw3F","tlshash":"57a29f65bb0dee83f9d0113b56a4c6ea2312dd4096f326563c2e70267b72f555c2f312","first_seen":"2024-08-20T14:43:16.056284Z","last_seen":"2026-09-30T18:11:03.027348Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.924Z","timestamp":1790791781924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://swiftkargoport.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181036\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-30T21:35:54.176117Z","times_seen":311376,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.942Z","timestamp":1790791782942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-09-30T21:30:41.478732Z","times_seen":102532,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":3,"connect":22,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:52.756Z","timestamp":1790791792756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://swiftkargoport.delivery/\r\nOrigin: https://swiftkargoport.delivery\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://swiftkargoport.delivery\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 30 Sep 2026 18:09:52 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":531,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/custom-style.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.172Z","timestamp":1790791779172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/custom-style.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 224\r\ndate: Wed, 30 Sep 2026 18:09:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":550,"size_decoded":552,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"51110467d04e1701e3b186cbe678251c","sha1":"223afcfb3b84c053f0e8d286e5d49402a21e6271","sha256":"900b1e2001834f38c1e352ced21834621329bc66fdacb32f06f385fd99e08694","sha512":"6feb5309d33c66ffb7001745f2a86a3a40f99d143bd4fa29ea58d823c3ab6c21717a12cbabfaaecc12cbb3aae964f356ba69257552c65b28d39cbbc0ef9cad9f","ssdeep":"","tlshash":"14f04699a680413310374f0e6073ba35b62be1334601b6393d90d72422ca9f988a2787","first_seen":"2025-04-17T05:23:49.774305Z","last_seen":"2026-09-30T18:11:02.990995Z","times_seen":68,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/bootstrap-datepicker.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.385Z","timestamp":1790791779385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-datepicker.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3728\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13776,"size_decoded":3985,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-09-30T18:11:03.017494Z","times_seen":470,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.validate.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.389Z","timestamp":1790791779389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/jquery.validate.min.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6108\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21068,"size_decoded":6365,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20964)","md5":"02a4a78977c67935d388e92928e6b735","sha1":"87b58387cd22f3280a081e30470648edceb4e4b0","sha256":"46dc5b21ccb40ed8e13a10b2e62a01648a841672091671f6b03bee034a0d00d4","sha512":"4b100b768f19463bcce2398099017df00a2cecb4e3eb720232578bc75fbc5c351a5af34f7b437dc879b614bf47951b70c02db80880af0b419127c4ad6fc56362","ssdeep":"384:QeOXcp7Lm+dmr9qhk0XuExz9Bcd1Jny+0xC7WpdOC8PGDm9KLNKI9ci9sk:dfXdmr990ekpqJny+UO798NBc8Z","tlshash":"d592b94d7282b04a5b9620f5a45b560ba1f259b8600ce03cb5f8d4d2fdf8fc95167fb8","first_seen":"2023-04-05T08:37:20Z","last_seen":"2026-09-30T21:19:11.390987Z","times_seen":4775,"resource_available":true,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/icon-googleplay.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.425Z","timestamp":1790791779425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/icon-googleplay.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4915\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4915,"size_decoded":5200,"mime_type":"image/png","magic":"PNG image data, 146 x 53, 8-bit/color RGBA, non-interlaced","md5":"938f928a026406d9384bb7734857168f","sha1":"1fbd4281a7efa63d6c1611b1cae9ac10bd2efa3b","sha256":"f53ac2d211951ee01a8a2e32bf219020c28bdbb022f7e967f7bb526563fa5414","sha512":"5d85ed24f2dcdf2689b4ca8eaf0944da8e7e61bee3cadf55b0966c00c705f780785b501848753614951d3411e6dbfd6eb1e599624609e3e488390464f06692f7","ssdeep":"96:RVSK2b0Aab7I/e7j7P2CibDPQMGAWz1W83ntI6L1IvYOteUWNrl:m3s7IK75ib7WAWz1W83ntI6L1IleUO5","tlshash":"6ca14ccfb9eb67027a4a528564d376a35c361cc070e25d537ecfca8308740e485b95dd","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-30T18:11:03.019098Z","times_seen":74,"resource_available":false,"data":null}},"time_used":2360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/image1.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.023Z","timestamp":1790791782023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/image1.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 200316\r\ndate: Wed, 30 Sep 2026 18:09:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":200316,"size_decoded":200604,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1010x621, components 3","md5":"e5c5946930d09a997097780296eb30b1","sha1":"ef86ed14a4eab21ca7b77ebf05f7d97dfd33409f","sha256":"1fa1ef56dcb1be7b2c650aa7d74fca5536d2919441f7fa9e7a0ef88e9a8e59f5","sha512":"4c77de553f85d6f8656244edb7f9cdead8c50acc3b59366dad2993f26d5ad46e6358c6942030e72ab95ff645f108d070179214b8c442c88f0259d2e8de1ef7bc","ssdeep":"6144:Xs34gm10MqKtJINV+N65yeJIZZxWNcdqx8dy:Xs3M1uIaqN65uX68o","tlshash":"7414125072c27fb098e43c3406c3ba7a0b3a46b45ded56bbe952d4d0e5d74ab887b8c1","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-30T18:11:03.021765Z","times_seen":69,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.938Z","timestamp":1790791782938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:22 GMT","end":"Thu, 03 Dec 2026 19:23:21 GMT"},"fingerprint":{"sha1":"4F:02:71:9A:10:A1:1B:03:0B:16:F5:66:E8:99:48:DC:83:30:E6:75","sha256":"94:3E:33:5F:A8:7E:B2:F3:CD:E5:9F:BB:9C:C7:8C:57:67:F3:9C:08:74:18:32:0F:F2:75:9B:9F:36:DB:BF:3C"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 20:15:27 GMT\r\nexpires: Wed, 29 Sep 2027 20:15:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 78855\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4798,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-30T21:36:18.112739Z","times_seen":39273,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/masonry.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.396Z","timestamp":1790791779396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/masonry.min.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8278\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28969,"size_decoded":8535,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28833)","md5":"85ef736bbfdf0ce0c537caca4c1f29f6","sha1":"b0dc16d9bbe017437e0f116c425c4e20bbd4bc58","sha256":"694749e85b4d7726dc87795b3783f8b0d64513b8eb90a8170e5db9ef2e3f4c19","sha512":"6a234d647e417447aed9fafa95bd727f848287bc533ed798612a95b397f56f344716906dd89c9b8b05b0eca3ff844455c9331c74170992a3b1a175a786769050","ssdeep":"768:f9+z0BFXYKby+HvOqKvVOkYtkdEvWBzigMPI0:fgKbbOlIkdEvPgI","tlshash":"f7d2c54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","first_seen":"2023-03-07T12:57:28Z","last_seen":"2026-09-30T18:11:03.00213Z","times_seen":169,"resource_available":true,"data":null}},"time_used":1487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/ionicons.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.444Z","timestamp":1790791779444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/ionicons.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7630\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57233,"size_decoded":7959,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (20240)","md5":"fffff6c0a358ff6f87e55ca318d363b1","sha1":"fceba750660aa99a9d159f629eea5be52d5a4e39","sha256":"1cd4be7be57d9d5846d092aaba15e878429d071a4f096440c43f38958a664526","sha512":"4a28072b50730b16d1a7ba7c09ab5edd7d4bfda863053dfcd22e8412e9ec19daea696bf28167919289d7727c69876f362927e1251043b178a1d513d0e90741ac","ssdeep":"384:W48numrLJrtpbxxYlbDiLq2LEg+KjL5w62s1zIZbyzid:W4wrTxilbOLVLEj+LfJ1kZmzid","tlshash":"f44310f6d71e0ee14e35d480330bab905775b5fda4580c59e00ba88df6cba28e2d29dd","first_seen":"2025-04-17T05:23:49.771246Z","last_seen":"2026-09-30T18:11:03.012378Z","times_seen":61,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh5.googleusercontent.com/proxy/s7-F34QFz4WmKbb-I_es_ldhvK-pJENIz-NwJg0Iq08Bu4SvY1MqWEjdDLgdbPJlXIQzZL5En6oWTQ","fqdn":"lh5.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.019Z","timestamp":1790791782019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:46 GMT","end":"Fri, 11 Dec 2026 20:01:45 GMT"},"fingerprint":{"sha1":"23:43:A0:11:7B:7F:06:34:48:5E:D9:68:CC:D1:AD:56:A7:AC:62:31","sha256":"7C:46:C9:EE:93:E6:42:16:8C:A9:70:41:D7:87:3A:AA:93:46:6A:5C:BC:02:C1:4C:6D:23:12:55:1F:A9:1E:01"}}},"request":{"raw":"GET /proxy/s7-F34QFz4WmKbb-I_es_ldhvK-pJENIz-NwJg0Iq08Bu4SvY1MqWEjdDLgdbPJlXIQzZL5En6oWTQ HTTP/1.1\r\nHost: lh5.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\nexpires: Thu, 01 Oct 2026 18:09:42 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: fife\r\ncontent-length: 51019\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51019,"size_decoded":51570,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 512x303, components 3","md5":"99e4e7ac449fe970c1002fdc26e8207d","sha1":"c770f4f24651491213bda9692a90489c3938868d","sha256":"041917687ad39e90ee212e046010b8399f54f046e6e1f8aacebc0f3220155116","sha512":"f6b26f3acfdc4dea3863feef95aa2bb0a07a3241dcece233f5607537157739706aebb7efa6840386b982e2ef6cd17419d08d21c0f72ec50dba876f9648346634","ssdeep":"1536:71kXTshEQ2RGJbU8cvvcdmCGna8l7cI4Fg:71kDshEQt2Hvch+a27cXi","tlshash":"dd3301ace2c8ed24cb0d9e7a3bc4426819dbc09d491d37789bbd5260c5f0c5a4b0f42a","first_seen":"2026-09-20T14:46:59.482885Z","last_seen":"2026-09-30T18:10:40.134584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":39,"receive":22,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.943Z","timestamp":1790791782943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 19:24:37 GMT\r\nexpires: Wed, 29 Sep 2027 19:24:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nage: 81905\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":1360,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-09-30T20:39:50.89215Z","times_seen":37519,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/bootstrap-select.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.383Z","timestamp":1790791779383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12881\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59424,"size_decoded":13139,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"72cf3ba80ac56eaf755bc760dd46924b","sha1":"10aaa874ab08af30a6982e80e097159eb55ef4f1","sha256":"6eadb9f319f0dd5b3fa94e780f0ee531dbada3ce7a190c187131483cece9016a","sha512":"7fbd0a761bb81609c43663e1d3b6c2629c42dc3c77fdadfb219b38f766212bcb049cc5e67faf611475ef232713395bf1909fe74f5427e164ab7e66e949c4f3c6","ssdeep":"768:9kHkK3JV9V0UCAMsl0xVQZc9PfYp10+6Wat1HrRnu/w94:9CJr9soA9Pwp10+6Wat1lu/w94","tlshash":"cc43625a36fb2230817b20aa5e9f5448b135812f5806e9293c5d43c86fd4938b6f7ff6","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-30T18:11:03.002757Z","times_seen":102,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.counterup.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.386Z","timestamp":1790791779386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/jquery.counterup.min.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 496\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1067,"size_decoded":752,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-30T18:11:02.996774Z","times_seen":13442,"resource_available":true,"data":null}},"time_used":1299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/storage/app/public/photos/JQLYyU5CFJ7tyteI4qLVYaAcM3sVZmRHP6HF9YG9.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.643Z","timestamp":1790791782643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /storage/app/public/photos/JQLYyU5CFJ7tyteI4qLVYaAcM3sVZmRHP6HF9YG9.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 09:14:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29894\r\ndate: Wed, 30 Sep 2026 18:09:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29894,"size_decoded":30181,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 736x736, components 3","md5":"09a8c271e5a52ee588195ae73405168c","sha1":"e796be566360e0d6b30ff9c0ffe94a5f801d6167","sha256":"87b6ec1243a3e72a21e34586d7ccecc34684bddbd9266e21df7078257bc6147b","sha512":"d29b3c56855a350d478df1e497bd0f7d2429b582a33e094c77eb3fc6901f6ca9a10b8d1b69abcbefd70e8777e64de7c140510cb86fb560d767f7cfbbe70ec3d7","ssdeep":"768:2Pifgcwm1ANlZUNXPJAUBeteYLXcQvoNnq+Fh5:2Pi4c112g2ZRDPih5","tlshash":"7fd2d1d4325b29c8c6ca6f3a5e175937db36cce55a3c8dcbc458a983147c5381ac8ec6","first_seen":"2026-09-30T18:10:40.137421Z","last_seen":"2026-09-30T18:11:02.978252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.793Z","timestamp":1790791782793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:22 GMT","end":"Thu, 03 Dec 2026 19:23:21 GMT"},"fingerprint":{"sha1":"4F:02:71:9A:10:A1:1B:03:0B:16:F5:66:E8:99:48:DC:83:30:E6:75","sha256":"94:3E:33:5F:A8:7E:B2:F3:CD:E5:9F:BB:9C:C7:8C:57:67:F3:9C:08:74:18:32:0F:F2:75:9B:9F:36:DB:BF:3C"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 19:24:36 GMT\r\nexpires: Wed, 29 Sep 2027 19:24:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 81906\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1582,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-30T21:30:41.532332Z","times_seen":75295,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.stellar.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.387Z","timestamp":1790791779387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/jquery.stellar.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4537\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23282,"size_decoded":4794,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (310)","md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-09-30T18:11:03.001076Z","times_seen":789,"resource_available":true,"data":null}},"time_used":1298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/news2.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.416Z","timestamp":1790791779416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/news2.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31876\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31876,"size_decoded":32163,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x210, components 3","md5":"1bf1c5371ed31154fca491faa5e02edd","sha1":"1ad54ffee8dbccc76ca7868ecdec6149b6eb7e93","sha256":"be77fd299ce1ec06d0a5b22784b164fe7c1614d65c35e12d3fa7f95d7075f5b6","sha512":"be068f5cc5e9ca3793007637cf6a6a7f8389e4e30706e3dab579cf21fb31575127039252db25013490286cb843e1539be4b0d1050ec107b59b6b90182691ffec","ssdeep":"768:9s7W2A4sRrIJMhCTxYNHKWgKth0j/swM068/7HX7bkyfx0F:9sNRGEaCT6QWgKunM0d3kG0F","tlshash":"c4e2f156d7e37e06f5da7e3d1898ddb205d3cd408f1bd38da148436978bc0a28267686","first_seen":"2024-08-20T14:43:16.02236Z","last_seen":"2026-09-30T18:11:03.003735Z","times_seen":72,"resource_available":false,"data":null}},"time_used":1566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1468,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/bootstrap-select.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.453Z","timestamp":1790791779453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1350\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6643,"size_decoded":1679,"mime_type":"text/css","magic":"ASCII text","md5":"aebb9fd3530a99ce0ddabafdf3eb8a7a","sha1":"03c9d48b035aa82f15f33450bdf778362221f07c","sha256":"a031409712ab20005498eb00a940ffedc6cbed46727979d7854e5d93c6ea6808","sha512":"4b4a698f4d7e66f03b5cc3becab9bf72ba4e2de7699018b574f91ea44c34205c5e7a522ba25571f00f6586348f57ee8e19e4588bd52769fe837e2605bb913873","ssdeep":"192:hV0L7t8v8yVd5nF7l4pHCSDJcvULuDcLb:r88F7l4pH5DJcU","tlshash":"afd10fed77e20170618981fa34856a53339db002728fc878b7dfa18c5fc618b6a73b56","first_seen":"2023-05-15T03:00:33Z","last_seen":"2026-09-30T18:11:03.03713Z","times_seen":136,"resource_available":true,"data":null}},"time_used":2333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:500,400,300,700\u0026amp;subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.799Z","timestamp":1790791781799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Roboto:500,400,300,700\u0026amp;subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:09:41 GMT\r\ndate: Wed, 30 Sep 2026 18:09:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":2426,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ba7c658fb900892ba3c80a4ab6029c5d","sha1":"b5e0e06cd259b2d7c1a0496b9cdc3e6a951ccb79","sha256":"1fed9a9f0c2575723702f958957d187a562ee172f0df5c1889e2d339676ab949","sha512":"d90733d22bf95b1d0681c33b4a8f1f4c93be127f987d4828fa373b2001881a82739202a6bc6bbd512adb0e8029c0db87286136c3bac6ffc810072bd59e4f5e7c","ssdeep":"384:39fn9+9h9d9yS9/qY4o9m9G939fa9D9w9k9yf9/qY459L9r9c9fF9Y979/9yE9/s:3FsbbYSRv4wFMl22YfRiJhan6BBYERNW","tlshash":"4aa20ca10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-19T22:49:57.257828Z","last_seen":"2026-09-30T21:17:21.825032Z","times_seen":7251,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":11,"connect":8,"send":0,"wait":23,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/fonts/et-line.woff","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.922Z","timestamp":1790791781922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/fonts/et-line.woff HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/et-line-fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: font/woff\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55220\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55220,"size_decoded":55506,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 55220, version 1.0","md5":"b01ff252761958325faab1535c90c87f","sha1":"d33413e7bc42acc8837cc9030ca45d29c1ccf0c6","sha256":"19d2f43d546ada73dd083f7778aa4a5cac1a8e7a3af56efccae580fce07a5e1c","sha512":"23fa6804a69fdba706d5b918d41dd9feb1b70c6e0b01e4aa4724d4027e1802e7e253301a9f7966d5ee86ac14e00e65c0bb4cb565b7b3173af8d95d9001952945","ssdeep":"1536:YC7RF69D0oLUKheQnEBIoCdDLT4z1cN2CTNr/:YCiooLneQ1oGMz6gCTNb","tlshash":"8e430239225cdc06f13b90f785686024347730be909fe8be8a7d49655227fd6f735681","first_seen":"2023-04-12T04:16:50Z","last_seen":"2026-09-30T18:11:03.005276Z","times_seen":1953,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:41.928Z","timestamp":1790791781928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 101578\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 21:05:23 GMT\r\nexpires: Wed, 29 Sep 2027 21:05:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 28 Sep 2026 19:51:53 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 75859\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":292791,"size_decoded":102418,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"e07202748f52b275a366dc765dedb884","sha1":"8768bb00ab50be7dda6103811f5cf3ee6b2a11bf","sha256":"9561c041bc10fdca6bd46059bcf9ab2c596a4251efe7260a00979ce2ab0663c7","sha512":"d550d20f48c2998189902c4aa1c7707eaa0ae68b066848cc8efe56806c6f8efb636713a0f66f7aea54dde10af65856ea6ddc0cfef77456cfd5d4feacba13c7c5","ssdeep":"3072:mL9aWR+K+zPZCPzb+bk1fRz62/OlDcpBi4unoLd+X9hcxBZoyZR:NzOzvVwIuTKB","tlshash":"c254e8ddb29670b79363f4a5513f004ab13b68a5f8484dacb288d8e26df4909417bf7c","first_seen":"2026-09-29T03:06:52.258789Z","last_seen":"2026-09-30T18:23:08.410148Z","times_seen":79,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":11,"connect":9,"send":0,"wait":10,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260928","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.940Z","timestamp":1790791782940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260928 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-QwDkIbDI5pvw6z02ZnrjUQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw0pBiEOLmeL7g61U2gRdPtvMqKSXlF8aXFCXmFecklqQWpxaVpRbFGxkYmRlYGlnoGZjEFxgAACEaEuA\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=CoMCCAIStQEBAQxeRV7yuqRQnuY_1e5IfApqJAlsYyRxT9qBm41EAhuWkDCaQv475Ih-iuz2rQ-SjRk7apBBMh3v5CvQ7ngguJ7GZoBvqD0pgFayFIVXbWyYEp8rtjztGJteWVG_ruDknwijoyYtPlEVRs45gRa4d8Ke_qXnOuOmeh0xvxB8K7lEsIMuGiUP7tiS4QO36Pnt1KmjOxDfRRGASrUby-D80SIsdOTz_mC-iYbfTFziI2epYloUKAIyRQF9bMSqPmMnbnzsp6EaGCefH6CFSNQSJH4d7SfBrto7BrvYmQ_ckspWS1RAjtc_kwvKGuv2B6vLL0qxO7ewavHzHLFxAQ; expires=Sun, 31-Oct-2027 10:28:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"CoMCCAIStQEBAQxeRV7yuqRQnuY_1e5IfApqJAlsYyRxT9qBm41EAhuWkDCaQv475Ih-iuz2rQ-SjRk7apBBMh3v5CvQ7ngguJ7GZoBvqD0pgFayFIVXbWyYEp8rtjztGJteWVG_ruDknwijoyYtPlEVRs45gRa4d8Ke_qXnOuOmeh0xvxB8K7lEsIMuGiUP7tiS4QO36Pnt1KmjOxDfRRGASrUby-D80SIsdOTz_mC-iYbfTFziI2epYloUKAIyRQF9bMSqPmMnbnzsp6EaGCefH6CFSNQSJH4d7SfBrto7BrvYmQ_ckspWS1RAjtc_kwvKGuv2B6vLL0qxO7ewavHzHLFxAQ","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-31T10:28:01Z","raw_expires":"Sun, 31-Oct-2027 10:28:01 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=CoMCCAIStQEBAQxeRV7yuqRQnuY_1e5IfApqJAlsYyRxT9qBm41EAhuWkDCaQv475Ih-iuz2rQ-SjRk7apBBMh3v5CvQ7ngguJ7GZoBvqD0pgFayFIVXbWyYEp8rtjztGJteWVG_ruDknwijoyYtPlEVRs45gRa4d8Ke_qXnOuOmeh0xvxB8K7lEsIMuGiUP7tiS4QO36Pnt1KmjOxDfRRGASrUby-D80SIsdOTz_mC-iYbfTFziI2epYloUKAIyRQF9bMSqPmMnbnzsp6EaGCefH6CFSNQSJH4d7SfBrto7BrvYmQ_ckspWS1RAjtc_kwvKGuv2B6vLL0qxO7ewavHzHLFxAQ; expires=Sun, 31-Oct-2027 10:28:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/steps-image3.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.021Z","timestamp":1790791782021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/steps-image3.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91354\r\ndate: Wed, 30 Sep 2026 18:09:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91354,"size_decoded":91640,"mime_type":"image/png","magic":"PNG image data, 428 x 260, 8-bit/color RGBA, non-interlaced","md5":"46bc449e051eba0f1457e24dc77bb985","sha1":"f83128277318f4d040fb58195df61d340aa47958","sha256":"8688ed8d0c4b92a65d3b733d6a38ccb2a6b02cbc1446e8533deb9d87f4047b15","sha512":"95290b62e420286d070a0bd357f215597ed4fa7133f73a375ea19e18b898fd0fd240043b7f6bb2471590ade13584fd523936a441fa0baab27f3c06ec6ac825c8","ssdeep":"1536:nBjAKooOMy/y5zGFT2BmJZmtoOXaxfBK9Q8whlz0fwIjtTnO4paFnLYRM+M:B0Ho2q5W2BcZmto8CE91tfwIxLaFnLOq","tlshash":"5193129ee5b6b56750c03f0f2ce6555aeb12b0d7dc0c87d897e0c505a278ca06eb6e83","first_seen":"2024-08-20T14:43:16.064581Z","last_seen":"2026-09-30T18:11:03.020646Z","times_seen":68,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.792Z","timestamp":1790791782792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:31 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181031\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-09-30T21:30:41.549026Z","times_seen":98798,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.378Z","timestamp":1790791779378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Wed, 30 Sep 2026 18:09:39 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apicms.thestar.com.my/uploads/images/2024/02/07/2532149.webp","fqdn":"apicms.thestar.com.my","domain":"thestar.com.my","tld":"com.my"},"ip":{"addr":"13.249.8.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.417Z","timestamp":1790791779417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.thestar.com.my","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Aug 2026 00:00:00 GMT","end":"Wed, 03 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"14:11:E5:4E:EB:D4:1D:2E:42:E5:0C:DC:44:5B:4A:2E:7A:5A:04:F9","sha256":"53:FA:6A:BF:F1:4B:6C:4E:74:AD:F3:7A:BD:25:1D:E8:9A:5E:B0:F0:3E:64:DF:8F:7A:BD:87:AB:48:90:10:0C"}}},"request":{"raw":"GET /uploads/images/2024/02/07/2532149.webp HTTP/1.1\r\nHost: apicms.thestar.com.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 104734\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nlast-modified: Tue, 07 May 2024 03:13:26 GMT\r\nx-amz-version-id: 9yjrNIv2863ComKAsTLBO52FiDCqnXhp\r\nx-amz-server-side-encryption: AES256\r\nx-amz-replication-status: COMPLETED\r\ndate: Wed, 30 Sep 2026 17:17:07 GMT\r\ncache-control: max-age=31536000\r\netag: \"1e0634218f1b07c1de7bc56b9edf6227\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b3fa44f24855583147e402819cdc6b70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: g09aFoQDTI74q_xkp2A5Ji-iiaEb2sbJb56ilcJH3yanZNCIzNZsvg==\r\nage: 3153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":104734,"size_decoded":105374,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e0634218f1b07c1de7bc56b9edf6227","sha1":"1a16831715ca8b1f58b56b3afed91e2d5a6aff78","sha256":"9e2e593cdc5460dfb879cd4e22363d1a584472e7bc951a57276904bc41a048c6","sha512":"9ba5f0b42a40d4798aebe976c03885477c37567ccd66c6b42323ebd03210e50889e0db3669489789f26feffec123f5cbd077fd37521b05f327f0ca697b524a27","ssdeep":"1536:GJpT6iVrgCsk2E2lYAY0C0cpR3nlVtyFa74IJn78tOE/g+LnkLEyeSqYoiKS3Udg:Gf66Ek2EPgFO3nlPTSDIMkQygiKqn","tlshash":"7fa3e028fcb46ad2c19d1e7b5bdb288a9dd31b86a8c10d1b71ec4e149f53ed088439f1","first_seen":"2026-06-26T17:25:46.570638Z","last_seen":"2026-09-30T18:11:03.011285Z","times_seen":5,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":5,"connect":8,"send":0,"wait":11,"receive":14,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/logo4.jpg","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.421Z","timestamp":1790791779421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/logo4.jpg HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24033\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24033,"size_decoded":24320,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=141, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=236], baseline, precision 8, 236x141, components 3","md5":"7b2623996addd3070774a17ad65e32e6","sha1":"74a43ff42b9547e97b7c5b36bcafd787df4b81ac","sha256":"a87a8366ba6cb1b1515ce4da5b7764a371cfa910006bd73a4263c2936eecc755","sha512":"dceaeab96ae7e1c0a72636948aded18d9cf24e99a399db23ff285f4fd0e32fd6f974eb444c7b3641291ff77ef6400d4a7295da88453f2105c3a8460d8ba50e63","ssdeep":"384:FrU+imvrJqi/iC+imvrJqyGnSKfvXJReLDhMccd2xE:FrU+iQJ//b+iQJtGbZr","tlshash":"29b27d286baecdf2fcd14478c4d5da8372205e818aaf75ea7c5d288bb7746c3441c293","first_seen":"2024-08-20T14:43:16.051491Z","last_seen":"2026-09-30T18:11:02.987757Z","times_seen":73,"resource_available":false,"data":null}},"time_used":2263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/steps-image2.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.021Z","timestamp":1790791782021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/steps-image2.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54205\r\ndate: Wed, 30 Sep 2026 18:09:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54205,"size_decoded":54491,"mime_type":"image/png","magic":"PNG image data, 428 x 260, 8-bit/color RGBA, non-interlaced","md5":"2f0f8fd4f0760f41ff9905b121b38903","sha1":"e7d26e1d1eda72c962705b8799252473f54c3b71","sha256":"3a0cef50fb78a6c4dfdb03cc6bec252e324a0d6b8874b17c279a50acf5efa1a3","sha512":"120a894d2026755b3186df3f32524aa037ca42135115e1aa188a584598336086ecb630afc2233292480798a414af0ec0c19f1facf827b154cc219431a516a74c","ssdeep":"1536:Cc+renBGDhXyR0vUREJUy+BVUil5gHnbixCGrT67Ya:ChreBGpyu2ESxBBsnOxCGra","tlshash":"c433f1457e75b409882b7be8c6f4e3ad9eb89c44b8656f6d8700be09c894f002dec0d6","first_seen":"2024-08-20T14:43:16.065516Z","last_seen":"2026-09-30T18:11:02.988974Z","times_seen":68,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.fancybox.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.392Z","timestamp":1790791779392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/jquery.fancybox.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13322\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48706,"size_decoded":13580,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"921e9cb04ad6e2559869ec845c5be39b","sha1":"1cf3d47b5ccb7cb6e9019c64f2a88d03a64853e4","sha256":"6c78ce6b6d1928630b903084ea9d503643f303ba05455860cc7cd17f7687cc65","sha512":"91ee03bd3766b2584c70361ad0ff4729cd2745fd661089c077884d1e6c181b6c2244ac7ed1c94a4cbf74f8101e9d4c54e2af52c55f35586a0675fe12df5e7ac0","ssdeep":"768:I29rFqkxIWVSSy7DkA7DxQPgsvtrJ68ov6iIMdl7YjSg/bEfOKk53tlUgb:IYFqkxIWVShDlDxQE2Al4Efi53Pb","tlshash":"af23a8d0f7ec317bc67620069d1e21ec613ed4329b0244bbbd9c666857c46ec83a5fa9","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-09-30T20:23:13.783604Z","times_seen":3378,"resource_available":true,"data":null}},"time_used":1433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1393,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/waypoints.min.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.393Z","timestamp":1790791779393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/waypoints.min.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2461\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8044,"size_decoded":2718,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7808)","md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-09-30T21:45:23.137893Z","times_seen":13145,"resource_available":true,"data":null}},"time_used":1432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/storage/app/public/photos/5IGjIiXqIPzcJwLppsFjcRIzMkVy1HisvlqZDwW4.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.402Z","timestamp":1790791779402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /storage/app/public/photos/5IGjIiXqIPzcJwLppsFjcRIzMkVy1HisvlqZDwW4.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36782\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36782,"size_decoded":37068,"mime_type":"image/png","magic":"PNG image data, 354 x 142, 8-bit/color RGBA, non-interlaced","md5":"f8cf09f432f075a23e5a1c9982379fd3","sha1":"afa9de6e004d2acc56433e5efe2404aeb3b15dee","sha256":"32b8e462db62e07e800c24f3b197aaa44e39ff5af2d7d06b6539cb8f17fd271c","sha512":"dab735728e05acf637799cf97b9a9cc3dad2fc619a21b6f31330f0f622b7de3b88536004a1c2f9ad634ad3260b38b4bbd15e4badfd238959909eab157f4013a1","ssdeep":"768:/D0WlRNl/pqHUWi/E7K+7D5gyx221foS3+OCtRVELnh7Vcrz:rvRN1pqHXf5NP1QTv6nh7Vc/","tlshash":"fef2f14e9367d9670d0205934d9bd6bf4733a702bc4c6af5b0bb63ab0a406a429f84f0","first_seen":"2026-06-26T17:25:46.509862Z","last_seen":"2026-09-30T18:11:02.97353Z","times_seen":5,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/bootstrap-datepicker.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.453Z","timestamp":1790791779453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-datepicker.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 951\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4953,"size_decoded":1279,"mime_type":"text/css","magic":"ASCII text","md5":"f0f519c66ea65bb3725ab268be978d60","sha1":"d95121446299a0b6a5b06e1d287e6e105a3e355a","sha256":"03ad95964d61ff7b69502b303b9d639aacc99ae34e054e2dfc11a6cd338f5822","sha512":"563504c2eff57a7a61d7c4b073ba552bf5a7d15eecadf9b959d8d6cddc8f217f929fbb1a82115ba820e194c96f641d2576bd2d8a78de592b96d6900bc74c24fe","ssdeep":"96:4lVdvCmyPTapd2l0USSPPxxxx11LLhNixx1ypapd2l0USMdo1:4PdvCmyPkFSPPxxxx11LLDixx1yyFH","tlshash":"e0a1019952d02c1b3633d2987920edfa3f4b558b44c1cb7c35e1b0acab1eec5496d5b2","first_seen":"2023-04-25T12:20:18Z","last_seen":"2026-09-30T18:11:02.975084Z","times_seen":453,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/#","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.927Z","timestamp":1790791782927,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:43.092Z","timestamp":1790791783092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 01:51:15 GMT\r\nexpires: Wed, 29 Sep 2027 01:51:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nage: 145108\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":1507,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-09-30T20:39:50.905666Z","times_seen":28839,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/jquery.form.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.390Z","timestamp":1790791779390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11217\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41095,"size_decoded":11475,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9ff23d156a15ac9eba83b6f571abd83f","sha1":"63b1ceaea04590b9611d3ef6dbb588b365be4559","sha256":"14b30a934e36cdfc5301709bf515adc31e060bd7275eb056964cf7d2ed6e7550","sha512":"5ed814a05a01362c292dbb7bd2ee41d8bf1f1dd6fd534ff63b6a1c1699d45e75739beedb068995da687c78fb365ff465940bd88f1db926260bb4d3f7b67a31ce","ssdeep":"768:4hN+wDMgNAWo8/e9z4UA+BtX66+PZ0s8Oa3ij6lOTwIMuliMIzMJVVRFRLRZzYih:cUwDMgNAWo8/e9DBaPZ03FSjCOpliMIG","tlshash":"de03a24a7aeb12a2192334b90bef91497639d0171208dd617d4c53a06fd4db4a2fafe8","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-09-30T21:19:11.362421Z","times_seen":992,"resource_available":true,"data":null}},"time_used":1395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1296,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/js/contact-form.js","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.391Z","timestamp":1790791779391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/js/contact-form.js HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 398\r\ndate: Wed, 30 Sep 2026 18:09:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1679,"size_decoded":654,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"25bb7b304b1e5670f12efecc20d5cdf7","sha1":"11eae764f91eb82846c64e6625351d27e428c0f5","sha256":"648a71e7545c79f8aa8dcbfb2aa601894f92c4074c9b507625212deda8fd4738","sha512":"366ed7a98dceb1e04a89f66cca690ea2ca6beb4e9b62e09754449f4c4920b42b98c801d20561674c8e0b9623ac4ccc6dc66779fe4893e63661c56d25aec972d9","ssdeep":"","tlshash":"e431814daefd29a5107372b6a17f22019937c11f6a092d31fe8c00b80f9d75d76a7b64","first_seen":"2023-03-08T09:19:52Z","last_seen":"2026-09-30T18:11:03.038773Z","times_seen":73,"resource_available":true,"data":null}},"time_used":1394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.businesstoday.com.my/wp-content/uploads/2023/05/swift-haulage.jpg","fqdn":"www.businesstoday.com.my","domain":"businesstoday.com.my","tld":"com.my"},"ip":{"addr":"104.21.40.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.415Z","timestamp":1790791779415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"businesstoday.com.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 14:45:35 GMT","end":"Thu, 17 Dec 2026 15:45:32 GMT"},"fingerprint":{"sha1":"C5:BD:8D:3B:FD:8D:CA:A0:64:B9:9F:7A:12:74:A7:D1:09:DC:40:02","sha256":"49:AD:B7:02:DE:21:05:49:95:49:83:76:93:76:79:17:94:6F:38:E8:B8:70:EF:C8:F7:A9:69:7D:CE:3D:30:7C"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/swift-haulage.jpg HTTP/1.1\r\nHost: www.businesstoday.com.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:09:39 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 14 May 2023 03:54:33 GMT\r\netag: \"64605b79-1a1b0\"\r\nexpires: Fri, 30 Oct 2026 17:17:05 GMT\r\ncache-control: max-age=2678400\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-runcache-type: native\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlMB8fj4%2FXstkFeNA6GYLE1PyRNDv%2BdUzvBMlL9UHqMl4a4MmLgjDzsBvO%2FiNmSR6uQZpsNCADWcJD8adObvubSAXuDxWBwuQqC7Kx37kLdLZ%2BwBuoUs6pcYi%2Bb9sIh8WCClZglcF%2FwPYCY%3D\"}]}\r\ncf-ray: a4352e0d7f795a0f-OSL\r\ncontent-length: 106928\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106928,"size_decoded":107826,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1073x839, components 3","md5":"a6057228cd194d82a4a5de71e58ec9ea","sha1":"570c5f084abb51edb09bffcb7f7fa24fe0ea0b34","sha256":"6fd2b095c081d231ce68d6c650cc2c6f7ed29232c3d634dad4edce38f8b8237e","sha512":"ef2839f35489eda6bbd274c539d158d003f28f137c7ca4c608066b5d6df6dd550de25578bfa6b9343bcdc79c77d75a132d001e1607023d9512ce1842c0f8b53e","ssdeep":"1536:/8KO5Cvs/eVt3xtB0J63ihlT2xUb42gBzq1EFdRi+pveO1oZWwHTabOU9O73wksv:NO5Cvs2X+GiP2VRi+8cgPU9O730","tlshash":"cea31208770e901226d62593eef31ba5f7aed6004c1419c67fd00db96d7e1a62fc8adb","first_seen":"2026-06-26T17:25:46.510786Z","last_seen":"2026-09-30T18:11:03.040542Z","times_seen":5,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":8,"connect":14,"send":0,"wait":200,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/icon-appstore.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.424Z","timestamp":1790791779424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/icon-appstore.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4961\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4961,"size_decoded":5246,"mime_type":"image/png","magic":"PNG image data, 146 x 53, 8-bit/color RGBA, non-interlaced","md5":"a5007a6f974e0bbef99fffe0f8255c63","sha1":"5a9922179163afa8e55f1ac9922df9c1c0b5bd43","sha256":"ddfafbb59ba0979b026050fdfb07603ab0239980be43f87cb63d8cd30895a02a","sha512":"3abe4371411079e04f31a4e7974c26eed8226592cb3ec0881c5db941823c0c438b8efd98590740e08782404f444eb9047b26e06da25b978a02e1c279b0a92e03","ssdeep":"96:RVSK2QYSWU2AXo7R+SuHGWptAGrjIfUrj5rAwSy51IUZqtnO:mNS+AowS+GWtdXIfUrjNfpqU","tlshash":"eaa17dab363749c7b06ce50640e7062396a1ded099e06cb87feda43106736dd49582ef","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-30T18:11:02.974336Z","times_seen":74,"resource_available":false,"data":null}},"time_used":2360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/slick.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.450Z","timestamp":1790791779450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/slick.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 480\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1767,"size_decoded":808,"mime_type":"text/css","magic":"ASCII text","md5":"88b2daf9da57af3ab03fea77577a2fe5","sha1":"439055f9b9d1f5e89f6b52b30d4e4ba232717351","sha256":"893485d48fc8651981b4810fee0d92ebd7fd85baa7f362ad3934a2c652be8dc9","sha512":"8a784d760ec8cdf4801fde07de5e82b61497e09c3ed7385eb2afcdec9674d59c8cbdb1af3a1d9defe8f57ee107039ed331d183257278f12b172a1c788883a405","ssdeep":"","tlshash":"d831285845b38946451681881fd7ca6d2ffff0130c28a198bacd53068fce7e8e9c16b2","first_seen":"2023-04-05T10:17:13Z","last_seen":"2026-09-30T18:11:03.030187Z","times_seen":3997,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{ffcb87b0-7ca8-4625-b145-f17321778bf2}?https://swiftkargoport.delivery","date":"2026-09-30T18:09:42.880Z","timestamp":1790791782880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=CvsBCAESrQEBOxGDSMVcdl5I9-Fo_SvshMxbPKkHkLDU2vAowg91XBxvWZwQCP9aR8xd4Bc11uNH5l2euglW3yxi7JDlXtDSzb_9putzXmnqH3silHSUszbep1egvc9bhD1Pfn1pbNVDEzxR7tapVl4RB3zS9Bsr53uUeWaM3qABzZ9VEJm80Y-CWZOCFAMVNte8dalbN9tD-ReSSnyvCFIbIRjcXi9CZgvOxYlUaNdsvo7RGygBMkUB0qwHz7Z1c4w8kCs1nbC7xd7x_tdpU3ZPsKxVFmSodm78O1CG6QNXePmby3oycMJNig-SQonap62MpjW496CpmRibUAI; expires=Thu, 01-Apr-2027 18:09:42 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Wed, 30 Sep 2026 18:09:42 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"CvsBCAESrQEBOxGDSMVcdl5I9-Fo_SvshMxbPKkHkLDU2vAowg91XBxvWZwQCP9aR8xd4Bc11uNH5l2euglW3yxi7JDlXtDSzb_9putzXmnqH3silHSUszbep1egvc9bhD1Pfn1pbNVDEzxR7tapVl4RB3zS9Bsr53uUeWaM3qABzZ9VEJm80Y-CWZOCFAMVNte8dalbN9tD-ReSSnyvCFIbIRjcXi9CZgvOxYlUaNdsvo7RGygBMkUB0qwHz7Z1c4w8kCs1nbC7xd7x_tdpU3ZPsKxVFmSodm78O1CG6QNXePmby3oycMJNig-SQonap62MpjW496CpmRibUAI","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-04-01T18:09:42Z","raw_expires":"Thu, 01-Apr-2027 18:09:42 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=CvsBCAESrQEBOxGDSMVcdl5I9-Fo_SvshMxbPKkHkLDU2vAowg91XBxvWZwQCP9aR8xd4Bc11uNH5l2euglW3yxi7JDlXtDSzb_9putzXmnqH3silHSUszbep1egvc9bhD1Pfn1pbNVDEzxR7tapVl4RB3zS9Bsr53uUeWaM3qABzZ9VEJm80Y-CWZOCFAMVNte8dalbN9tD-ReSSnyvCFIbIRjcXi9CZgvOxYlUaNdsvo7RGygBMkUB0qwHz7Z1c4w8kCs1nbC7xd7x_tdpU3ZPsKxVFmSodm78O1CG6QNXePmby3oycMJNig-SQonap62MpjW496CpmRibUAI; expires=Thu, 01-Apr-2027 18:09:42 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3613,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-09-30T21:52:08.668033Z","times_seen":29147,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":5,"connect":8,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:43.093Z","timestamp":1790791783093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 01:44:12 GMT\r\nexpires: Wed, 29 Sep 2027 01:44:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nage: 145531\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":2072,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-30T21:52:08.674635Z","times_seen":34421,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/css/jquery.fancybox.css","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:39.451Z","timestamp":1790791779451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/css/jquery.fancybox.css HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1292\r\ndate: Wed, 30 Sep 2026 18:09:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4840,"size_decoded":1621,"mime_type":"text/css","magic":"ASCII text","md5":"471e0fef5b8fb45c966c2d54d2d34ee2","sha1":"28b17eca621caa317f32099dd7655d434c934aee","sha256":"7d03a2bbc7518cfe455ee6f6a322c3f05c2295f0e1dae613be864bbe7b1aca08","sha512":"a17f5262be993bfb583803d65c9de272a704ef559dca6ec2d5cdd8ae6c4f694e974a0c8d53eeeb70c4d76b9d56b0b4df2df462fb19ebc40dfe19a3c989eb9323","ssdeep":"96:GKXaIzQFRhRdrlAWJDo0Oy8Li4cSX2W4LeO2gnTMo:GKQF/7rjyStLNnj","tlshash":"d4a1116b6a503a01643f9e50db6f9a45d63f2486aa0b4efb611cf92883d53e011f3dcc","first_seen":"2023-05-16T23:11:23Z","last_seen":"2026-09-30T18:11:03.034086Z","times_seen":66,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swiftkargoport.delivery/temp/custom/images/steps-image1.png","fqdn":"swiftkargoport.delivery","domain":"swiftkargoport.delivery","tld":"delivery"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swiftkargoport.delivery/","date":"2026-09-30T18:09:42.020Z","timestamp":1790791782020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swiftkargoport.delivery","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 08:00:34 GMT","end":"Mon, 28 Dec 2026 08:00:33 GMT"},"fingerprint":{"sha1":"CE:33:F6:7E:99:E7:BB:A9:C6:67:AA:70:31:2C:85:2D:26:A7:01:41","sha256":"F1:72:6F:94:CB:08:D1:6D:B8:3E:E4:77:C2:E0:45:91:18:A6:61:7C:1E:A5:81:BC:90:FC:4A:85:FF:51:40:F3"}}},"request":{"raw":"GET /temp/custom/images/steps-image1.png HTTP/1.1\r\nHost: swiftkargoport.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swiftkargoport.delivery/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D; swift_kargo_delivery_session=eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IlhqYmsxWlQ4cTMwRTZaeDkyQy9CUGc9PSIsInZhbHVlIjoiN0RkQ29yUGRXYUxvVEZ1emdNVVdWRlZvY0tDYzFaR0RzcEw5Y3I1dDlZS1pvc0l6bGJndFVrRzJud2FJakhjaGJCK2t2eWhLcTViMGpxVmkvbFJ4R1RiZ01lbWRYYzlnV3k0NHpXaGhLNC81NitPMUgvNjhSenBKZUNBOGk2QVQiLCJtYWMiOiI2ZjZiMWUyYmYyMzk3NTllYzY4NTViODI2ZTA0ZmRjNGI1MjdkZDIxNzA3NTEwOTFlYzA5ODBiZDZmOWEwMjQ0IiwidGFnIjoiIn0%3D"},{"name":"swift_kargo_delivery_session","value":"eyJpdiI6IkJYQkZqbURPaDRLTmd2OGNKNE5NN2c9PSIsInZhbHVlIjoiY1BkQlFrNEsxbUlTN3N6ZHUyd0RhWEtmMTJaZ1ZKR0Z6akZGZHBqVWx5K1greGppN2F2Qm5NT3d2bUJVbUIxeXhKd3A1Rm4rNjY2WU1ZS3EvSnliMzZUeVNTNTREblVVamlib0pmcDdmbWZ1akhEUTQrdlUyU2JDODd3QVM3T24iLCJtYWMiOiIzNDllNzc4NjFlNGI0Mjk5NjNmZjY5YWY2YzZiMzI2MTZlOTRhOGNhZmZiZTkyMzE2NDc3NzkyMjJmZDQwOTY3IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:09:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Sep 2026 08:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 86805\r\ndate: Wed, 30 Sep 2026 18:09:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86805,"size_decoded":87091,"mime_type":"image/png","magic":"PNG image data, 377 x 229, 8-bit/color RGBA, non-interlaced","md5":"2708a9a1b9cdfdb6fdb9e195e8b301df","sha1":"de1542766a1c07b1944ab1459eba342b7103f61a","sha256":"aea776d560cc70853e69604406d8e30d1bc1efbf07356df8e1ecfb3b8d318534","sha512":"685700f179ff9dbb0c50f116340e101afd68621bfbdfb79348b2b666fcee8b0914a90900e8910b576f4ca830a8014b719f3888704e1a7f5bc32235e4ad73f9d5","ssdeep":"1536:TIUT2hNHATgDi7wUQE/OFf0uGzuR5JCrld2pdLGGA+XR/TO8ZqKXqSM3lbMYl5Lp:TIlhNogDKeEGF3GImxCdLa+9vZTazRP1","tlshash":"4e830296bc9fe621cf24a9a685b0c23b2f07b5ef19b4dd0331d9985c5e18a13942db84","first_seen":"2024-08-20T14:43:16.063889Z","last_seen":"2026-09-30T18:11:03.007187Z","times_seen":68,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"swiftkargoport.delivery","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"swiftkargoport.delivery","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}