{"report_id":"d2b3acbc-f237-46a4-8d1a-a10c14f0bf25","version":6,"status":"done","tags":[],"date":"2026-05-26T16:48:39Z","url":{"schema":"http","addr":"btc-exchange-swap.com","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":0,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"btc-exchange-swap.com/","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"title":"Best No KYC Crypto Exchange 2026 Buy Bitcoin Without ID","dom":{"size":40248,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (322)","md5":"c8598ac49a11f716f8f4ff0d303b4cf8","sha1":"2cc5fe6207e77132fb29bca7d2e2b65c050d0d1f","sha256":"0ecccb21f5277eaccadd44fd59859068abd3f5cffd038e3aed8e278a7973d435","sha512":"250e09b8492249e0ea5e64f33dfd6df39387c88cb979adda2d61ff4a2e8806af7e8f12c74275753d8467b962aaea790d8e2f39aa4e3eb4c453a354ce4b853482","ssdeep":"768:1UUhIka22VS2KDIka22VS2KN6y93rngp3:1UUhT0y93ro3","tlshash":"0a030d1930fe857704ab92e559a30a063ee9e307e0191596bebd0bec0fc7c65ecb7548","dom_hash":"domhashdc486dec4f3b929d7d86f823b738968b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btc-exchange-swap.com","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":0,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-30T16:48:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1683,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"btc-exchange-swap.com","ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-30T06:01:20.380021Z","last_seen":"2026-03-30T06:01:20.380021Z","alert_count":54,"request_count":54,"received_data":267826,"sent_data":26826,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btc-exchange-swap.com/","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccef190460eb8d83ac9df29d6c95b397","sha1":"4d3b43b8ab17955d86bc7e8f4bfedf7fd9520cb3","sha256":"092553dbe0f1fefa15f480835ab8572d9b3ac23ba61ff62728bc87e1ce5dffa6","sha512":"8c34e6ba3e67435e1b3c762383615d27e4201d332e46d21e48013415e438be90c689a7c4a5bb68265b7f7990108ba2055c2dd0ffad9de44d89c9990e31fb39e9","ssdeep":"96:liFcYhIUKtCp354oaq7QniFnTXq9QvmVECWPJKKLy8UWLKWIdK3KyKL:icYhLYGGocniFTXRvmVEzPJdy8UWLzIF","tlshash":"3981207b32bf59310abfa2eb96e7a3997815004f7941e5803fac05841fd0e9294379da","size":4107,"data":"","first_seen":"2025-08-08T03:14:58.330526Z","last_seen":"2026-06-01T01:08:15.79005Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/trx.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/trx.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 651\r\nlast-modified: Wed, 20 May 2026 11:59:14 GMT\r\netag: \"6a0da212-28b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f3f390369f12750aab8fd55f786372f","sha1":"6e657fc446743d340bf0443c41fa07e893029c88","sha256":"6f5f6afca8e2facd43297b21b9c453d61994224184265284605e0ad21d3ac09b","sha512":"62ef62d6a342a8af66a436447b00329feea2ea696bc6935de9d9f4370a6c017bcd90ea2fb85d3a31a9eebb61ca06fa0d55c55c95c8e32fb983e92e082115351a","ssdeep":"","tlshash":"27f02dbf11657ab9e595a3813145b01e21a4b002f6b890ae2fe76823b8098f780a0c23","first_seen":"2023-11-07T08:36:10Z","last_seen":"2026-07-27T07:02:50.006588Z","times_seen":784,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/get_rate.php?from=BTC\u0026to=USDT-ERC20","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /get_rate.php?from=BTC\u0026to=USDT-ERC20 HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btc-exchange-swap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80ba3989e64bec29861cd0ee71947b4f","sha1":"1a9aba0299251acf131dc5da25ec89684dbf3b46","sha256":"dd347f750788e72d15111b117ed67eca262b89bbda66aaab3d3e43290d36b35a","sha512":"954b0829c3718230b26c4a3b42c192f9613b8169528350236f4fd4db717e82b973fd3a404c66e466b7bd0cbf12be6f279ef825daa15763465bc2c807b6cde814","ssdeep":"","tlshash":"b16000800208e800020000202208c000202000000008020200a80b808a000c0a02a800","first_seen":"2026-05-26T16:48:43.212704Z","last_seen":"2026-05-26T16:48:43.212704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/arb.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/arb.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1fb-782\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7e9bc0adcf5af84067eb66e36be7b6b","sha1":"f099b35e6d366088d70fc148f1a910c119ce79c1","sha256":"f719363fae816b4c9af724ae8935e6c978792fb774349cd0582b1a1bb4ae12c2","sha512":"c8fa17b077f4c89fc2024a6bd050084c434e60bce91e77670e6c2fdeda5840b43ae4d145afed719299e28e4409a22154d7d3e2568e83b1905b2a30ccdf48388c","ssdeep":"","tlshash":"e1414208019d3d4e76edc7c53bba41da54fbabfbd1410488b5fb2cdd67015650e56890","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-07-22T19:39:47.827444Z","times_seen":587,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdtmatic.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdtmatic.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da21a-586\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d0e6e76cbffd37bc0aef1b5a85e0f60","sha1":"de286a9d64f68d471abd382e796935b8f9d73e55","sha256":"6136d482b83eaa2ab3d9f13a6682876a75eb5f8c070f0928dd112db2e518f3eb","sha512":"ba9d2633aa02fa8dfde4d602ca7d5b426a19a93c6d860384854d365b1c1b9b2e4831e4a0a1150325fcd976717aff2be225d4338f88e45c60c7f55e14790fe6f9","ssdeep":"","tlshash":"48210335439c82bc398a0bb8fd7864f0c4cf9add44f5e3a022fd861071960d951ed8ca","first_seen":"2025-08-08T03:14:57.897783Z","last_seen":"2026-07-17T00:08:20.439142Z","times_seen":494,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/ltc.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/ltc.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 489\r\nlast-modified: Wed, 20 May 2026 11:59:05 GMT\r\netag: \"6a0da209-1e9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6046cca14ef5741d48469675250f8d1a","sha1":"e5d3cb531aa29112387e94a9d68a1ea583576c8b","sha256":"20dd004b22b76d98151807b3ca99196f84edf24cc5d66c33e3aaabfd9ada6d19","sha512":"e4153f5893945f12cf4bcb8b0a66e1b360fcbdd62be00058ec3e6d32452e3aaed2913e3328ca99a3067acb5ed5964df60796b7e56199dfb316790bc413877b31","ssdeep":"","tlshash":"f6f0d47bdb50ce2ddb50472cc0c2b50210704542f1c24294ef97012cf80b8b3747c9c2","first_seen":"2023-07-06T20:31:16Z","last_seen":"2026-07-27T04:39:31.967045Z","times_seen":811,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/shib.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/shib.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da20f-26a6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e53ff3a90e8c46f183c2f76f5e56c725","sha1":"496b59dfa36d361399419112394dbfa2d638ed44","sha256":"e1718d832724f003ff97f4b2e5210ef48399cc992b00efca2ca3a17f75ccc908","sha512":"afd69f9c50b857827d1e73b101c64b058c2a537fa94272fa0041cf084ef3bb3d6ec2ee63c9db2a91252bc807374dd0821d9436469590d7eb31f4e6bce2e5be6d","ssdeep":"192:u0x5yqAxbG8Nz+R4y42CMAAq79NzpdyjfLFtCmkdPc6lI1y:u0vVAhG8Nz6gMAH79NzpQLfNkdU6O0","tlshash":"61122f074388ebf8bda98228d51064d979d5ecdbe430f2d4bb6b1442c58c4d5a68c7fe","first_seen":"2023-05-22T20:26:51Z","last_seen":"2026-07-27T03:39:43.182674Z","times_seen":570,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/pol.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/pol.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 627\r\nlast-modified: Wed, 20 May 2026 11:59:09 GMT\r\netag: \"6a0da20d-273\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa72aafc7e825106d06b43aa3d1dcb6c","sha1":"6a4c770f18a70687baf0f1d884bd481fba583fba","sha256":"a496a1b5d645e93a82d186448d686aacbffbe431282b1df283adf5015c64c237","sha512":"256729f2f1bc66a17ab67005e9de5e7c4768b136159c55a283e9e35b950eddcc9e3f2f4adee6101e3ad4d2ff112a3e6e2855143f5ac1ac586b2dd6363085510a","ssdeep":"","tlshash":"fcf0dd48c309b83da426470093bdb1c173a172c9e2540d8c94a528b7a597c8c42955f8","first_seen":"2025-07-04T10:15:19.63792Z","last_seen":"2026-07-22T16:45:29.725364Z","times_seen":570,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/s.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/s.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da20f-486\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1158,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bccb21c07afe15bf010c92ffff579b05","sha1":"cf707548bed3016c7670802c7b26052c65e5a2cb","sha256":"2a054b4943caf7ba55eb71ccc22058c0a84454537a9436658d5ebc21ee08452b","sha512":"a9ce685c5df36ef630703b0ba633e80f80b503e241a85449980b08a2ed173b5fa0b2a40f9d6c3cfaed71a370a80b5f8952b8041abb19d75f7d7ec33cb6a669ae","ssdeep":"","tlshash":"49211167eb49d6bc464587648d3166b17b8be49cb3835364c2e2c330624bad183b5dd4","first_seen":"2025-08-08T03:14:58.04309Z","last_seen":"2026-07-17T00:08:20.431464Z","times_seen":493,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdtbnb.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdtbnb.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da219-67a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8336cbfae1821eaa5e60c4a732199e8b","sha1":"d1058b932852bfe85ea3a028bd1a745f121f7ee4","sha256":"0d861cdf93979e1c668f798b89d66eba2c77b187d9e3a6603ca4a0052a2f8e70","sha512":"d8b827b3101ef220e9867d3203f1118c4cdc5ceb041371dec513febda85f052ad5070d8a7974cf35017818647f8a59b7903b0afe9d512e2370b0a73b5d201f4b","ssdeep":"","tlshash":"70319ea8d676c2f46e4b4774ce742bd22e66d34c97a0472c43b26720b2159f37248c7e","first_seen":"2025-08-08T03:14:58.328265Z","last_seen":"2026-07-17T00:08:20.444218Z","times_seen":494,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdtsol.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdtsol.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da21b-919\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64346595d18c63284443047e061af26d","sha1":"4cf0e95a278cceb2f92b1b872225c28822d8810f","sha256":"14c6fe294604e23397d327c03d26d9f9241175b035a5a31dafedb98d8dde1aec","sha512":"4f603cd6fe045ffff816fe139267c0ee7437258f3501bc797fabc1abfa566d09c15a7438dc76fd91cd3ad0388ddcc1f9d18645f33f4ca62378d26e520c87d21a","ssdeep":"","tlshash":"90412052e204d23b8d4f82bdcb7660b42413505c76feb2b892e35b1d70178e5f5089b8","first_seen":"2025-08-08T03:14:58.31984Z","last_seen":"2026-07-17T00:08:20.399161Z","times_seen":494,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdcsol.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdcsol.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da216-ca9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d20a02fa42c7ecf717261f06b657429","sha1":"e34f466c2fdfdd7bf4d9cbd21391db8b7452c2f3","sha256":"0414052fd922bb1d9598fb1d8a97114ee7c2ad4093f4f0fb40d3073fdc5fe332","sha512":"6256b6d5cf07d6eab0831ecced5e1adec8019773334115a952d44777d4a68aa2ed7f469d30d4bf13247f15ae18f72aa851568049f4360c2741b47cf81b43ffb0","ssdeep":"","tlshash":"1a616383c2245271cc4d88ac9725752d1656a88b7a708ad0efef5b1ed40e5f2510dad9","first_seen":"2025-08-08T03:14:58.321449Z","last_seen":"2026-07-17T00:08:20.443545Z","times_seen":493,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/link.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/link.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 387\r\nlast-modified: Wed, 20 May 2026 11:59:04 GMT\r\netag: \"6a0da208-183\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b02bc11930246d53d859deaa960862f","sha1":"8319ab21888d10b5afd2b0dad4b24e642b6c558c","sha256":"44f03722fe182e5cee65cb2811b293ca23d759c150d00ac309179a493b572875","sha512":"93c68fe6e30e65471333f4ba3ff57e9950f8a1b8ad0da0b12e46c07d04023bc4e19dd5bdaec86a3931275f8fa05f9dcd23c7cd64a640f671a9e2e18252639b31","ssdeep":"","tlshash":"cbe0689bd34a9ea8b61a812866d4f024d8a5bd75c28a9ca5fae3642f905c8f41910846","first_seen":"2024-08-20T15:05:04.25452Z","last_seen":"2026-07-27T06:35:46.466821Z","times_seen":615,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/xaut.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/xaut.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da21f-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"366ffdc65a8d259c1c34081748586241","sha1":"aa10fade865478c4a704092d6b7d0371a515f964","sha256":"5d5581a3457b735d7f5300005c78171bdeea07787786ef3073a0a5f7b8675cd6","sha512":"9b316bbb7c94b5db6ea30533fe53d653dcb163406df9e91eb6b7d4fcee54691f9ed5cc7c503e2c3068e80737882ff0c236b046b7815bff14495efbe2db41b698","ssdeep":"","tlshash":"8c21453bd3199c75e13b8798d684d50b7438796af1c9d2ece6c0771b35314e30954e28","first_seen":"2023-08-12T12:25:11Z","last_seen":"2026-07-22T10:26:59.334794Z","times_seen":514,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdtarb.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdtarb.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da218-865\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d70c261908a7bd2cde182a6a477850be","sha1":"d587b777974afb3eb63009d8d06cd27f962acc5b","sha256":"fced8c4a47899704bd2606b577df5f893abafc9ad4625d91cbdc3f4deb13aede","sha512":"1c37f056407c887510b202b57af8d6007c66c2358dfa1fee7d64cd62e23aa0ac957f4b77b4490fd8e9655132307f0d572f60a7a5f48c30046bba3a0660df0ff5","ssdeep":"","tlshash":"744110b5a75a45fc0d0b4bb8ab3494b0671f187eb35b02342d5fa3f0a1074edd9938a4","first_seen":"2025-08-08T03:14:58.088751Z","last_seen":"2026-07-17T00:08:20.398403Z","times_seen":493,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdceth.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdceth.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da215-5fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"322c3a29937251efd44281265efce141","sha1":"25ccd65f50945df52ac20313e9eee1daa4231a02","sha256":"25585d58d4deed391e7d396abfaa5c8724b1248c62d2f4df66fd1a5e918207a3","sha512":"9ad9ba6d21bea4dcf6c7a33b4dc4ddd73f8e90a6cba251534afe89126f241522698bc01bf0176dbeff07e1341b21dbc369023bda8b74f4f190223f2e3c92b306","ssdeep":"","tlshash":"9e3111f0e1343338ce8a4bf49e6e74b5bc8f68ee45e893107188e65072512ce22e9965","first_seen":"2025-08-08T03:14:58.202197Z","last_seen":"2026-07-17T00:08:20.445798Z","times_seen":494,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdcbnb.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdcbnb.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da215-745\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0ce7292c332994628c0e1b4c08ab3f4","sha1":"1a9f3fd35b77a7de9671d1fd808d2681f8110da7","sha256":"491df7d4fa868a5356791fb10e13ba0ae2035752b4ec38c37ce882f8ec3ba457","sha512":"d4191f59758967ba29c4af68028487bcfb88f8327b0b3685bb3d82f53312ee83ba16cfa6753bdedb444ed7596c419e263f9f68c9e17030ab950e946539116ae1","ssdeep":"","tlshash":"0931dca482246373ce5bc7f4de7d7ab67c8e50ad00c4c33595fc922072511dd22aa4f9","first_seen":"2025-08-08T03:14:58.302643Z","last_seen":"2026-07-17T00:08:20.437112Z","times_seen":494,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btc-exchange-swap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 01:45:24 GMT\r\nexpires: Fri, 21 May 2027 01:45:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 486174\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-27T12:58:09.347464Z","times_seen":247662,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":138,"dns":1,"connect":16,"send":0,"wait":16,"receive":21,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-26T16:48:17.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":40492,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (322)","md5":"99af44eeb43c8e433cd177fdbe2af0cd","sha1":"4e1fb1c706707f39948d16c89b2ee7c48b13041c","sha256":"7659e9142025534098be7273b0e1e341516c8eb9c3df2489cfe7034342050804","sha512":"0c0e10743a03fa3cca457c7acc90f6b2479eb6944da13a73c3e43cdc6c2ebcac19ed84ee8a121fadb8899bf62bb99536d7f3525a46137c89877f2383d0344623","ssdeep":"768:zwcHcDxXv8b5rCcDxXv8b5rE6y93rngp7:zwcHsBy93ro7","tlshash":"8f03fd0930fec57704bb52e959a30a473ed5e303e119159abead0aec0fd7c65eca7248","first_seen":"2026-05-26T16:48:43.239711Z","last_seen":"2026-05-26T16:48:43.239711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":156,"dns":54,"connect":43,"send":0,"wait":61,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/ada.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/ada.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1f9-163d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5693,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aea691c581b22a12b85bbe81506ae8b","sha1":"aa06a813f0588d3836f76ae4624fa51faa7bfa43","sha256":"59c9f3504914a9c3f16669e94db5469289161142c9257f1a3741129ffe2c969c","sha512":"b6a26cf5523f43de49c34fe2d5fca5fc1ea1b48e4d429be6197244a65bfc842bc002b18292879e112eac0d4858e59814285516cd80b38ccfa093c371dc96c5c0","ssdeep":"96:2vfuV+ovy2ZN6EaiFkhspmCGuG4OduEaNJfvKcZB7t+yTWXqzqxM:uuV+ov/VFkhspmCGDGbf/7tFTJzqxM","tlshash":"38c1bd520304ebf7aca587988ae8148575d69deff430f1d46ebf1427da0c8c489987db","first_seen":"2024-08-20T15:05:04.269975Z","last_seen":"2026-07-17T00:08:20.430606Z","times_seen":568,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/zec.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/zec.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da222-578\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1400,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0355dfef0156fa1410290c6f62594b18","sha1":"de25f2fc3d8e8417c25e9cacf316b8ab9ae5aa94","sha256":"c202292c36336b109523fff68c5e8de3a659ca2dbea6a7d1e9fdead80c0e1a90","sha512":"0f5db1dd772218a22b21ca44ceb50ab2a85036712ea4a17c7618f6bec7b4b6d198ed3e638158d8497132decdb5402823f3df0699d391c8cd56e6d00fa44ccb94","ssdeep":"","tlshash":"8a211664b3875e39b9b1c394ecd0b89e3029207a90c5415cd555bf5ee495df01c84ad4","first_seen":"2024-08-20T15:05:04.252796Z","last_seen":"2026-07-24T03:34:43.621465Z","times_seen":519,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/daieth.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/daieth.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 906\r\nlast-modified: Wed, 20 May 2026 11:58:59 GMT\r\netag: \"6a0da203-38a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d87ee22969e0aae24f1f110320f3b41d","sha1":"1689674b0c03a65cb2d7276913344f474196b0fc","sha256":"dadf1b43249c6a30982100346e82a7e56b7670e8495aa57627ab1ab257daa266","sha512":"cc55a781434ea99a8d3926946a518e14e059f86e8b79373a93fe66c93bd2be75f0c5cc53c84d97ab9095d7275a7f071b604ae247fbfff3dcaf00819ed36a6c29","ssdeep":"","tlshash":"3911dcf8f570246cde460bf08eae14e0b8992cddcca85652910f31007a9138f50f0aa1","first_seen":"2025-08-08T03:14:58.13591Z","last_seen":"2026-07-17T00:08:20.415491Z","times_seen":493,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/bnb.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/bnb.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1fe-648\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aa88810b9f05826b0ce034c0799f7e6","sha1":"7f7092e9e20565d527a1ceddf7e123a6fa1112ca","sha256":"d068cbf5169368d3e27992d205e7891f2a376908fb6d6f5edbacf11a3f058c61","sha512":"6af3a7895649bb3b8fe912d4921403d91a3f24fa9182a978aa5451ec54bac8608c42ca332bdd48d4f50a3c0dbe22cff883bbcd615c6b2181d32fdd3b7a531ab5","ssdeep":"","tlshash":"46313305c7d4c7a7bc95c7ced6b11542427350e9a23382b4fb0bc531bc2e0aa0a4c6f9","first_seen":"2023-08-06T01:12:06Z","last_seen":"2026-07-24T19:43:52.58931Z","times_seen":764,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/ton.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/ton.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 808\r\nlast-modified: Wed, 20 May 2026 11:59:14 GMT\r\netag: \"6a0da212-328\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f26a4968e7bd522daab3b7a71309bb7","sha1":"feedef31ecd11c0473ab2bb2af23a32b90634626","sha256":"453cf5649b76d7eb5b0648bd83aca1c5958cb042d75d89e81b0f0ce6201a66a6","sha512":"3333cc6363bd95447403fc146be17f4295994259f160c9528f9ec0bbdea5e219f0f5f71297e402bf8c3d92040943ea724bb25d3d03f561d4ef67fd715994132a","ssdeep":"","tlshash":"6f01120583815f5a6814861073ac55d2b3f5f4c7e170a9cc81d6343af64c8d41688bcd","first_seen":"2025-05-23T11:37:09.503981Z","last_seen":"2026-07-17T00:08:20.410668Z","times_seen":563,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/dot.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/dot.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da206-41f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7544a7dc0217267f00df8da7abbf25f5","sha1":"e5a447cc3934c038d8ff6cfded94664b719bfe9f","sha256":"eeb8fe43686e638fa2de0026fb3fa0e17371910f27e8404adf31ca800512b4ae","sha512":"48f2c2d4ab0fadef1b4079420e1f9e882979af83f2a0f02c16a0ad4d444a4402c9e2268cf3fa24572fe2042d41ed2e5be2e3b46290181c84b9245f261a328f19","ssdeep":"","tlshash":"1b118c59f24cf425991a1148c7f3aae197ae92278f909a8e80b17dbcf7728e015417f1","first_seen":"2024-12-17T05:49:38.368976Z","last_seen":"2026-07-20T14:55:16.141402Z","times_seen":539,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdtton.png","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdtton.png HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 35528\r\nlast-modified: Wed, 20 May 2026 11:59:24 GMT\r\netag: \"6a0da21c-8ac8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"31e889c88c60a941fbbae1853dbf5a9e","sha1":"a8152e08885bb744822697063188366158b9c069","sha256":"0ea77264a2518023316f8bb8ab2a5fdeffbe9d687558e96cbc799a75caa07533","sha512":"8311df33378ac3dc0ed885dfcca144f29a99481abf4b53942ceed48a31971dfbcbc5ca6fd0aeb0d7c70e62d56cefdc571f0d3ec1309c8c4b2aa593bb89a93218","ssdeep":"768:0akjq7Du7AnW7uFlu+u4QOOqdDdVpiDSP+9hFsQ++DhhPonv+yxKi:f+q7K+zF8H4QO/ldHi2P+bFseNmv+YV","tlshash":"b4f2d04045590f8ade66e0387a687efc7f72231f811a7798932fd689235a3f39069b41","first_seen":"2025-08-08T03:14:58.247261Z","last_seen":"2026-07-17T00:08:20.426249Z","times_seen":494,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdcmatic.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdcmatic.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da216-747\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1863,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"168fcea028c4ac606fabb64b132cd323","sha1":"048c021a3a8797e444903e3e9c6d618357961864","sha256":"0941676070cb87e8a7fe56295a5dd41a6958368f78c904d0d74e143e57552d0b","sha512":"95362941bc9622ff2ef4a78909017218af8250681225de4e30e69e42c8c31df6519f04575bde726d517587c0c051f5d0a9a3452c04d739a4dec51047fcffa80f","ssdeep":"","tlshash":"da310e70c3689378bdca0bf8ee7874b1e8cf9aad05e8d35461e8c57072510dd12dd44a","first_seen":"2025-08-08T03:14:58.274832Z","last_seen":"2026-07-17T00:08:20.381822Z","times_seen":494,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/atom.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/atom.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1fd-842\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e915ff17eb74750c84f8b87158be2d5e","sha1":"09c8f89fca808b27d169819d8899f0a59f761bdd","sha256":"4010e79c2131a2cceee1027940138e866c0c95fa961059ce6958cf5a3ea460c4","sha512":"8a25aff49d8176fb636c00b4e8ea7d5b1aa93ff6bda312ecbff55da86b1206c13366f6666f4e183f781b8230d2053d9463f50f2368ab92488c327396b968ea66","ssdeep":"","tlshash":"294142b7c38d2f264841426ed9e7607925a89138eb7491ec9763e22fbe059f0241cdec","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-07-17T00:08:20.43547Z","times_seen":670,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdc.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdc.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da213-6a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b5972c16a9795dcf6e2e2d7e3125d21","sha1":"9b1cbfda8bd93368b67de6e9aba62fd250bfc7ee","sha256":"913adf09fc3097cfee7f76a3226bacd52237f2ac714817d68eaf73bfc3a72109","sha512":"c271a0fcc19d8a62481e3c72dc679186d89f28b642fd5322b3e66250d4d63e549b6a468cb407ded0d92b5786e0e1fd3b99cc218da873133d2ab80f6af03fb791","ssdeep":"","tlshash":"d7312918eb950a399848c393ada42fa53a0f73bdb114c2fc94b45e30b935c9cdde508a","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-07-27T06:35:46.481958Z","times_seen":757,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/daibnb.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/daibnb.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da201-4d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d65c85fccdce8a2e6dddef2c26e66cff","sha1":"d7f02719e75158096cceca288bef2368061f2176","sha256":"7b98008cf62b1cae702574b447bb541e281d16575de557e4fdeb8c2986434255","sha512":"64374064858c2c79d35673a6cbfae67688644dc95a9af2a20effb22dee8573eb07f0fedeaa5f33a5811c8118188e30d29f122ebe945486264b1e6b7d12cca87b","ssdeep":"","tlshash":"0e2167a8865005abd91bd7f0ca7c7bf67cad048c48c5cb73c5be321076521d961b54fa","first_seen":"2025-08-08T03:14:58.28393Z","last_seen":"2026-07-17T00:08:20.446557Z","times_seen":494,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/daimatic.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/daimatic.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da203-4de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4436cbc4b6eeeeb953b4c04bc7c48e52","sha1":"49efdacaddb14aeb6bee5c3da7c7c896280157ad","sha256":"053977827032cdcccbe0b9fae05550151bf57a20bc6b047997e7d8f3c3e3239e","sha512":"3999d7da8e0a80642cff3a60a13b6222f6b9bf8ce58df7115c643ea00f1ac1e84ef2afe2cca8a14d83a46f6694a5b8d56802a2d5957efbc727e03f91e3441056","ssdeep":"","tlshash":"5621cb75c79982bd38c70b78ea7844e0d4df9f8c4cf9d2d181bf9568b2910d441ed85a","first_seen":"2025-08-08T03:14:57.943685Z","last_seen":"2026-07-17T00:08:20.43971Z","times_seen":493,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/css/design.css","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /css/design.css HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 11:58:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1f5-1ec5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7f2476ed85ee885880bc2a0876b3b854","sha1":"5f599322d05b33759b6d4dc5919b83cada465b5a","sha256":"0e5bd23b193b250b6712fb55055b1d8f07508136d8c09ab427a1c55544b9e1bd","sha512":"0ab923b2826e6d51bcd08b38c762adf82fc0bb1513d1803c256f7ccd2c7224450b58f7c0ea0d2112a1211efbd509ce0f06afd1c492cdb12882ad2986f2559782","ssdeep":"96:ER7L50gauXMCo+CDL/Fx51Cs4xGsdR4xe8CH14pQB3/C5arxndCs+sxXMBMeeJeM:kL50gRo+yuDVTfK5a+s5gteYhIpj","tlshash":"daf1f2916b2491b8b837e7b876c75b5e335871108506e87caee8206cdfc93f94563b88","first_seen":"2026-01-10T17:59:18.448993Z","last_seen":"2026-06-01T01:08:15.753278Z","times_seen":22,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/xmr.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/xmr.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 940\r\nlast-modified: Wed, 20 May 2026 11:59:29 GMT\r\netag: \"6a0da221-3ac\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ac5949dd8d861e10abeee3e4d546d0","sha1":"172f8c99e4b56bc6be6a86791e08fbe867640b40","sha256":"668c28e1a5e0ce6839c6b3a8a35c5dfba3e284a442f7ae4049398472f72ace27","sha512":"d0cb29e855ecafffbd4a49c4b287849ac133c97f0aa9d098d197031add5df8cf51668d2ec34db0934230c216952acf87bc7c4ddce33c6564da2e39e56395eac5","ssdeep":"","tlshash":"d7114083a0702d1ee07689c88be9ae260c7c91b563d92dfcf6d32d3e1531c7811c8a90","first_seen":"2023-05-22T07:53:58Z","last_seen":"2026-07-24T03:34:43.617771Z","times_seen":560,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/xrp.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/xrp.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 472\r\nlast-modified: Wed, 20 May 2026 11:59:29 GMT\r\netag: \"6a0da221-1d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"639b151a2217fe161ce8042566cacec9","sha1":"64e49a6afb3c8b84342c50821b0db39defad887e","sha256":"7ef9f0d812984cb142e870166076e2221266528206274b080a2f0035ade4224a","sha512":"bf722bc3adaa6bcb2693f989959f36dba411d725b35c0ad08d4cdb96bfbdd67b52b7532d08c9ebfeca2c0559dfb3179cb44fe573aebd462ec0f6ec17dc1a4817","ssdeep":"","tlshash":"b6f0dc7f93459df4f11ac37e6c887680a0b3b0408a9c80dda3c13d232104c626032615","first_seen":"2024-08-20T15:05:04.276138Z","last_seen":"2026-07-27T07:02:50.032442Z","times_seen":729,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/aave.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/aave.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 986\r\nlast-modified: Wed, 20 May 2026 11:58:50 GMT\r\netag: \"6a0da1fa-3da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":986,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43b3ac8008da5b6ac71ad555efcf5986","sha1":"be7203559d86576a67cc91077314ea26d2a345a9","sha256":"55071c18b66729760d28f32766e4a39acb9b7bb179d9fd9389f1aeaff8d41829","sha512":"9ac3b42a9c11bca5fda1681782542761eaa12fe85731ec54516cd4128ae918926f7cad8256591a02775ffed5b653f9ff663c14a7314a62390f4567ee6d2dfb1f","ssdeep":"","tlshash":"60112d02829cc6ba9c63c331a6e870c32241f435f0b0a4f9fdeb5464860d2f00906ff6","first_seen":"2025-07-04T10:15:19.593113Z","last_seen":"2026-07-17T00:08:20.425259Z","times_seen":510,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/pepe.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/pepe.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da20c-4d69\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32b9ac73ce19668645d07c043bdb7ae0","sha1":"0d668bf6a962dd5a6192a0ebd003502edc603c94","sha256":"cab2d27b6b789d9f86dbbb91ada3b3a5bf3d83b3aa02e8145d81e89131228dbb","sha512":"74652f084d180e65e4379f946d9232c09e90fc7d6c0e0b87cae2e0919e8d19601ca055c622d787388ea669d3f54c3c4307dfe94c15bc0ae25b7a9dfaea11d894","ssdeep":"384:7VcTgHGcXSvgKIqL0xKjc4XnNzFLbu3dMeaWGd4wYzEEYFUgSBa:R/GoS4Pj4dFkBVzbgSk","tlshash":"3092a913438097bafe984868aa6124d5b1d5ecd7d4b4e3c0eb7f140ad94c4e0a5ac7fb","first_seen":"2025-08-08T03:14:57.833421Z","last_seen":"2026-07-17T18:10:22.996758Z","times_seen":500,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/op.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/op.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da20b-647\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1321c628e6fc01f56221b42b7899656","sha1":"14b324aabf8931c1f10bbfe101dfc6882ebf93f0","sha256":"8c52ff09c6306abac25cbf8f051db1596b41e856f1c9dd55b27c1a42abefde01","sha512":"b588788f22e971e919d79a055c821ede95089de0d17eade09e9911e50c15c7e66811237ea4a495a65a68ef2d4d04828416c41f95f8bb25764a569622ab299ddf","ssdeep":"","tlshash":"df31ed1a4701cbb9be99413c4aa0798d73f2ac95a174f4d4739b106ac5488d4694c7ed","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-07-17T00:08:20.41163Z","times_seen":529,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btc-exchange-swap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 01:45:24 GMT\r\nexpires: Fri, 21 May 2027 01:45:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 486175\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-27T12:58:09.347464Z","times_seen":247662,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":385,"dns":1,"connect":19,"send":0,"wait":15,"receive":5,"ssl":365},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/dash.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/dash.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 621\r\nlast-modified: Wed, 20 May 2026 11:59:00 GMT\r\netag: \"6a0da204-26d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94b9ae90fc721072b5f8199a6ab9a747","sha1":"7155ad4c23b1f03550d3c3ff9866ad0e6a3f67e8","sha256":"307cd15ae12153f9c4440063dc5e53d44c1dafabe2c015c599cb97a179d7e7a0","sha512":"70a1aea23f3140f4b6cd9f8e6abb14f2f92df85a25af947d52358be2c1b2891aca438ad79930521becc98ffe80765d854e77bd88aba4052e5ebbcd14fc9ffe59","ssdeep":"","tlshash":"71f0dd6f82498f3abe1382b65a98284520fdb4e850a0d0a870e2701fd0488f45970593","first_seen":"2023-05-09T12:11:59Z","last_seen":"2026-07-17T00:08:20.442896Z","times_seen":510,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdt.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdt.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 874\r\nlast-modified: Wed, 20 May 2026 11:59:20 GMT\r\netag: \"6a0da218-36a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f688a0313c926433ef60c377c7cc51","sha1":"7edea9502e75583e0f93815ebb6700ad04af7e04","sha256":"fc9c52d67a9dd9c5983c2f679218e804d9ba4aecef8a1074003e3de9efdea088","sha512":"3c957f1758fb3b3a1cf125a8c4e4a5728e0f7072202c421cf834306b6f0ae931291d3181ca725890e67e4274eefbfe114b4796f1cf5be597ab70b8f39c30f3b5","ssdeep":"","tlshash":"4611e3a6d5982f7005c9077c561a70e930f8c88ff5a445eddf7a5a36bc14cf68d280a7","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-07-27T10:16:03.591442Z","times_seen":727,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 26 May 2026 16:48:18 GMT\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-07-27T08:49:08.119676Z","times_seen":8514,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":401,"dns":2,"connect":16,"send":0,"wait":67,"receive":0,"ssl":408},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/eth.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/eth.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da208-541\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c19954628081bf6fd772fa0d0819547","sha1":"9c1d03cc04bb9d2e2f8577ad561abb9c9ac9dae5","sha256":"066b2a60df66fbe2c11bbf7d37201552fd27e4edca73cac4a3e7ebda3ceb2486","sha512":"3f40c39fa2e06194f6957ad2bb7cf6c752dd9ad12eaefe891a56380496d85f383331fc4c557b42f3cd897bdfa02c87d4f27ff457b1c11ecdbba6053ff2549ff4","ssdeep":"","tlshash":"fc21eef5ad9e6991c5fe83b4b5fc91532853c0cf008a0880fac07681ac066fe4e42adc","first_seen":"2023-10-24T01:06:33Z","last_seen":"2026-07-27T04:37:14.492716Z","times_seen":828,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/avax.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/avax.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1fd-653\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e9df24ea466b546f238627045e3f242","sha1":"f77d52a7ec76d6c123f80edf561bc76060bce738","sha256":"1770e468b98420107a7385066571b9ea8c2a86c327c16f5bf59108983a40657c","sha512":"c78827f51b37840004cb8855fc78f1e647a5a66c72817cf8511c598c47aa10db2ec372f358df6ae6befb90a026e304872d20e911e34f5a99e973647aec68a733","ssdeep":"","tlshash":"c13133dc1a4688dc5dc485f4f72030d4da1ff0fd66026e15c248ae5868938e88e4d55f","first_seen":"2023-05-07T20:18:14Z","last_seen":"2026-07-27T03:39:43.164372Z","times_seen":722,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/xlm.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/xlm.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 705\r\nlast-modified: Wed, 20 May 2026 11:59:27 GMT\r\netag: \"6a0da21f-2c1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad29091e7d23481da4685f74853b6ee5","sha1":"86c0460566479b9b0db731eb497bc970ab4d99a8","sha256":"c2e1a69ec05cbdf97b55af1e2d815fbc2a1dbf64f90b2eb5114125a3db00fffa","sha512":"f64919df5b486ed747e8e3513a29e3fa384f3afa6fb865034e812cebf802ec9838cb5dbe01911bc725c1967a079057947f0b2fc91d355207521f057167212f83","ssdeep":"","tlshash":"8c01c073634a0f20f1514798afc8681225e2716671d5c9b867522be92d05cf32930c30","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-07-17T00:08:20.442205Z","times_seen":522,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdcarb.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdcarb.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da213-957\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04718d4bd8563bc973c42ec327721c90","sha1":"dafb67871836f9a57c2406668e0b30117aa5d75c","sha256":"6b3bafccf0606dfda24d8a260da11509827e3a536d911bf9a74f2c3d6f4dfdb0","sha512":"3292511798b47f488491934ee96641097a16f8571d1cdf396287282d7bc960dab879f5968a355bfccdfd7ec39b7fc5aa6bb3ad6a3df4e864832164e04348aa26","ssdeep":"","tlshash":"e141edf4a21d52bc0d4b8bb89b3698746b1f587ab38a02342d9fd2b091074fdd9d3894","first_seen":"2025-08-08T03:14:58.329492Z","last_seen":"2026-07-17T00:08:20.379796Z","times_seen":494,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btc-exchange-swap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 01:45:24 GMT\r\nexpires: Fri, 21 May 2027 01:45:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 486174\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-27T12:58:09.347464Z","times_seen":247662,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":143,"dns":1,"connect":15,"send":0,"wait":21,"receive":11,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/favicon.ico","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:19.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:19 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 20 May 2026 11:57:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1b2-10be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"0f5e81aa5b0f8c854c571df8f6e8427d","sha1":"619086f4a23b734c7beb9d243146fa174d67f637","sha256":"c0bfba561f8f6db635c6759b8ddc125c14988aa405abef719eca0d5d4f2fa20a","sha512":"f14b58f106a437c55fea30a4288137bf8e2414a9d54738b8162a9e2d81bae4da52db14bcc4b6e9a3bfbc50ae98a7fe9cef636cc4b71755f70a1fc5c0664f6097","ssdeep":"48:f2CYhkfccx0UQKaQESV+OdRUOozliYqcOyz+mNV:sYxjHEzwRXUwcOyt/","tlshash":"4e913302e9c7262bd3c65273c51ffa3157af9e9d2c4b50882098f6625f33d8a1e1581c","first_seen":"2026-01-24T19:48:14.102195Z","last_seen":"2026-05-26T16:48:43.267786Z","times_seen":25,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/doge.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/doge.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da205-df60\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfe942ea1ab1cdd5b24bf66e4764bee1","sha1":"cda102204962596c36af10643a9c7d52f2d27185","sha256":"fd1c5bba25550fb3817560c04c9ec96e9b1a59251249997220a98b8c69cc5cdc","sha512":"7f118456391705644d5bb4c3b668c055f7b145344cde2e4c4e72062c80882c0ddca1d137d5da4f58b9bcf5b70e285e33557e30726449c9a6f0c07529701e80c2","ssdeep":"768:ceNIDXtN03ZpiteAidcLojmW3/tbHH2OZugokMUXzCknYL9bkFyyFWATv:ceNWQAXUme/RdZdok/jdvXz","tlshash":"a3438993d2a817fc79460b24c531706679f555aa723be39ccb67d6827806ef200bcc7a","first_seen":"2023-11-25T21:53:24Z","last_seen":"2026-07-27T07:02:50.058351Z","times_seen":969,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/apt.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/apt.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1fb-5d3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c7ad284010a856ad4cdd3f7bfc6b909","sha1":"aa7da091593b330064132f70b65a86065fb75845","sha256":"c7cd444572695311269e63476d0851682e0bed974c89b49353f039b1e033b0f3","sha512":"75222414c7c18a7997168a511c88716d6bd6e21c4913873a785e6fd5077d0ff099a87070be9df43d5cdd3a4a01213a737351d16f4c6facb076ec37f9e5cfb436","ssdeep":"","tlshash":"f231e20bc350daf9ad424538f315b860f6909ca5a470f1d8aba91855f50cce471adbeb","first_seen":"2024-11-24T05:56:59.788956Z","last_seen":"2026-07-17T00:08:20.434686Z","times_seen":503,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:57:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1b5-1c1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5b0485cd6aee98e7cde3ff5057a463a","sha1":"7572418546e0382f9a691e57004e1346f2d0dadd","sha256":"547f52b809c2accdfa28e3e790c046be400be7f80a354e51b3f445fb50be0a21","sha512":"3a6fb9e72afd8757923ff178761ab3caee5a982d980bd1136c88e42540a9af936dcfe095c0a32b3d78cd017e724a05a14578e57cc7e795aa2c757f513611fb4f","ssdeep":"192:cz+P6EjX62uySRAHFmPrfthcRlXl1N+aRXets/9XEC:c/EG26CHSrfthM9+aRN","tlshash":"fbe177a8cba38978cec907f446b45d113aab441f7679e5eccb18e571e862cf940244de","first_seen":"2024-12-20T10:58:56.868453Z","last_seen":"2026-07-16T07:26:47.477978Z","times_seen":32,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/bch.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/bch.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da1fe-4be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d291a67357599252f1208c0842ee9","sha1":"d1c95e8b248838d153735628c110951d18aa057b","sha256":"0af9263278022b11dd522c2ec26c5dc4e07e35f0b421fac7278951f0066795aa","sha512":"53d756eee3c4cb922a701fc0e427708d4d1b25a440bd5a2ac02e454288cd4a25ed575f42db132687b408525e155776df42b3acad643de2ef2761a64d89450ae3","ssdeep":"","tlshash":"10213f0881d5a87efc50e11953a0158633b4ac6fd430aa90f8eba85ec24c8d0128dfaf","first_seen":"2023-07-23T06:53:23Z","last_seen":"2026-07-27T09:33:16.863865Z","times_seen":850,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/wbtc.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/wbtc.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da21e-696\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec1996e5df275212861eb647fec114ba","sha1":"a1e21bb75e8c7e33c054c29146dfeaed577d0d6b","sha256":"7af7a4b20040df46c98ef79ee867f3e429f01a87c9d4f2a62cf0d7c56814974b","sha512":"cfa333737e008e56e417e6593cdf823f5032dab29aaeb1d23ef62bec9784988599519adfda0861d4f0280ca6e1d53a37569b3a132a30885e2e4232548285b18b","ssdeep":"","tlshash":"8e3132b7436d1cf2ac038ba676e0d42374f164fee258c9ec77eb21774406a762a24831","first_seen":"2025-08-08T03:14:58.291829Z","last_seen":"2026-07-17T00:08:20.407412Z","times_seen":493,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/get_rate.php?from=BTC\u0026to=ETH","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /get_rate.php?from=BTC\u0026to=ETH HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btc-exchange-swap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"18e05db3cbe528eb0dc798d3734c35be","sha1":"5c6eeb53946493c63598777a2645df68fb73be17","sha256":"d34cd62b0386322ed1348a0267140704dd9c92c297342461651453115b85eeab","sha512":"085c4c722299a1bc173857d17b26e420d6bb23a72029ee6546b2d6afdde60495380f751fe694f045f34373ee835cc5f459c8357bfe12e7a52f5b1172c85b33ac","ssdeep":"","tlshash":"80700000002bce00a008c0300a82e000000080233008200080eb0a02c80a2030c0ccb0","first_seen":"2026-05-26T16:48:43.275035Z","last_seen":"2026-05-26T16:48:43.275035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/sui.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/sui.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da210-4bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acd43b38b0d5a1a02bf1484ca78ed1a9","sha1":"ef7e22ce96d9919dc3550d8563bac2b48a868ae9","sha256":"20a6ae6ce038f9f48d610c05d7269cf0a4a0fe2226a86172498b9ae3b7ddaebc","sha512":"0baa471a56f84c975a9a0a869bd72106f47d368032b27feecc3c10495b0d3b13852b4da93683ae8e6a37db068d4ee91fb7f06ad8b9553e935ef31b7344ad693f","ssdeep":"","tlshash":"cb21020783c19fa9be15823c03e4a19072b1a4c6f0f0a7dc7b971a52d44d8d4419e7fb","first_seen":"2025-07-04T10:15:19.602231Z","last_seen":"2026-07-17T00:08:20.413633Z","times_seen":513,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/etc.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/etc.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 954\r\nlast-modified: Wed, 20 May 2026 11:59:02 GMT\r\netag: \"6a0da206-3ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d4534ae68dc2efc7ee6f7186e3c8b6b","sha1":"b803c4d8579db205bf55bfc9761db80d68baa1e7","sha256":"07ec8c673d077df357ddd662ddc84f4ee80777bbf07800426999f687084f860d","sha512":"8b1d3dd409226322c6d7b801ac3de2f3a70671ccb7c90bbbac466e1f32d50d6df9ee77892b65bf403fbf97636d1f11ad0a53297f84a518e82536448ad426958d","ssdeep":"","tlshash":"e1112d3d7bae7cb05a8643587990b8817831316d6bad01de78e5b5335d0aab10833e43","first_seen":"2023-12-24T22:32:30Z","last_seen":"2026-07-24T03:34:43.632659Z","times_seen":518,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/weth.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/weth.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da21e-85b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e06ef72a3829d2c0b7ee12b02c618963","sha1":"290daa3f604e0f807a26820891174b8b49a09dfa","sha256":"f7a5b397898cb68f6928de822474b10447af4c0fec8b7a540a2842cea9e776c0","sha512":"99043372570509443c19d122647b946e251c079d7df3345e77d01891f985bb5d1206bf8c608da478cfbd29b93883487df4d5e609c656581ada721a336abacf29","ssdeep":"","tlshash":"6c41239531b965bcd40097328b2f357af92358e9364155dcc2d43f49e86482e1c96dcf","first_seen":"2025-08-08T03:14:58.252172Z","last_seen":"2026-07-17T00:08:20.416348Z","times_seen":495,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/btc.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/btc.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:58:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da200-815\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f92890de8d6512e2597d378f00254e71","sha1":"ae4f3414bffd2594adedb794d4f9eefb2a86c382","sha256":"51a4362311aab24ca9f1b68d3ff5faf423385db8ffdade0894bd6acb799e53d3","sha512":"6ab7b81fef67d104a6fdf5c9523efc3d03d6039913a3cd3dac6d22fd4975d2449be7043953c840ff0ee8fdc7226894b07c287790381b0fb653579d8dd55f140f","ssdeep":"","tlshash":"cc41a5fcca1a8952ca9e4b6ceafc4c5e2f23604f016d01fcc58296f57c125f58645a9d","first_seen":"2023-07-06T20:31:23Z","last_seen":"2026-07-27T04:37:14.464047Z","times_seen":831,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/sol.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/sol.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da210-6f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e6fecb2c83dd517ad34f5851b99ca82","sha1":"1f08ca68f7b9d5810f4048c90119b5f30a1d13c8","sha256":"767bd52ed4f4764f27243d78f441d6690b2024d5526044e06e55f49b8008d47a","sha512":"a932d777e8766aef3c077f636a6aa361d8afab191185092d28a353b765b8a86c26f9a71d611fa6d85d906a6ecff70451615fd8316947728aa63bd3cf0fe587de","ssdeep":"","tlshash":"b6310215e51a68bbf415c24ccee1197523e802eb9062d7e091a17e3ef5acce1001f3dd","first_seen":"2023-05-11T17:52:35Z","last_seen":"2026-07-27T03:39:43.146138Z","times_seen":755,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-exchange-swap.com/logo/usdttrx.svg","fqdn":"btc-exchange-swap.com","domain":"btc-exchange-swap.com","tld":"com"},"ip":{"addr":"176.97.114.50","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-exchange-swap.com/","date":"2026-05-26T16:48:18.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-exchange-swap.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:16:22 GMT","end":"Tue, 18 Aug 2026 10:16:21 GMT"},"fingerprint":{"sha1":"30:5C:27:8A:A4:44:0C:1A:B4:53:63:C2:44:AC:C9:26:7C:1F:79:A9","sha256":"37:B8:D5:A8:80:E3:2F:74:9F:A8:04:96:57:74:03:D5:C5:CC:DF:09:56:79:AB:24:2A:9F:F4:9A:87:1F:CC:A2"}}},"request":{"raw":"GET /logo/usdttrx.svg HTTP/1.1\r\nHost: btc-exchange-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-exchange-swap.com/\r\nCookie: PHPSESSID=27g683nvbqot4f5obdh98sg9t4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 May 2026 16:48:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 May 2026 11:59:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0da21c-86b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2155,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65d0769f04cff5821407a498732732e3","sha1":"a503d417c974fc1e3a487c7471cc91af07c2f727","sha256":"eff62a2f0d19a238745f0644f5db3eb0e22ab3432b51fb40fb23843e2d0ceab9","sha512":"0f787807b5f5ffeee4358f187a2b1e737b0e81c2d7775a7b358d9cd59723fb8f844599f743e42314fb2db4060bf3c1bb43e4de5f187e44b0c52b4a2a2c8aa536","ssdeep":"","tlshash":"f84199788384d3789ecad7bcaf35b8b4a44ea0fed1e283148395915072d24d9f3ad8d1","first_seen":"2025-08-08T03:14:57.853514Z","last_seen":"2026-07-17T00:08:20.390595Z","times_seen":494,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"btc-exchange-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}