{"report_id":"d35a6bd1-3468-4203-9f53-8129b6b2060a","version":0,"status":"done","tags":[],"date":"2026-09-19T13:39:21Z","url":{"schema":"http","addr":"coinswap.now/","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"104.21.48.250","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinswap.now/","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"title":"CoinSwap — Compare Crypto Swap Rates \u0026 Exchange Instantly","dom":{"size":123716,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58045)","md5":"0837c8f78ad3912b2ffb7d3cf5486b33","sha1":"fb828d22361df99c291f13b6366136e4111edd01","sha256":"f38930d7c664579c9769d051194f1ccc70b7a0ffcd119ad9262f6332680d35b8","sha512":"b6c85fc2dfdf225358e7e60b2197f3c04ac49a51adf48b6a32d055e8beaceb7b688e23e3e09a9a4f0e9048079ecfc787ca81de9e8be0b81b1359c4db14bbc337","ssdeep":"3072:xfYoCHiCAiIwUw8yky2KWJAA6iQLxDgqXYyA3NN:xgoCHiCAiIwUw8yky2KW0hZWr","tlshash":"76c3a8367200d93fd8bf4e9a327e6d36518f825aca6add3df1dcd124128187c9a639c4","dom_hash":"domhashb090f10e0c4038b0c2516ef103c45160","first_seen":"2026-09-19T13:39:46.408166Z","last_seen":"2026-09-19T13:39:46.408166Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinswap.now/","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"104.21.48.250","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T13:39:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.lane.chat","ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T13:34:52.516324Z","last_seen":"2026-09-19T13:34:52.516324Z","alert_count":0,"request_count":6,"received_data":1242697,"sent_data":2782,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.lanechat-cdn.com","ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-09-19T13:34:52.522859Z","last_seen":"2026-09-19T13:34:52.522859Z","alert_count":0,"request_count":7,"received_data":7544,"sent_data":4825,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"assets.coingecko.com","ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":509273,"first_seen":"2017-10-11T16:24:34Z","last_seen":"2026-09-15T17:47:29.398392Z","alert_count":0,"request_count":12,"received_data":28286,"sent_data":6811,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-09-14T07:05:48.596753Z","alert_count":0,"request_count":1,"received_data":944,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":1,"received_data":524424,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"coinswap.now","ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T13:34:52.525464Z","last_seen":"2026-09-19T13:34:52.525464Z","alert_count":57,"request_count":57,"received_data":3259398,"sent_data":32415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-09-17T09:35:27.918377Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-09-14T11:53:22.488478Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/webpack-db0199c3179b9b2f.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac747b9990e0d14cd2da8b225643ca12","sha1":"3c8269f3b5efdcfa807b2e5796714a985e83af06","sha256":"796c4b8a97ddcb324ce63cf1e9577696f0e16c040fd006503b182871917f6d60","sha512":"f6eec38d31bc37bf7426990c670529def9b6ff122b9bdd006888cb2eb8342ce829c03d20598567458dc9a407e7b77b698dfe217efd67e98cbc08da77d388cbe6","ssdeep":"192:IYb7ARGebpMDYRr4okKrFUfID8ktcXB77:HF6M2zkKrFUZSwP","tlshash":"50e13da97768fce62b7004c2ec2a42e0f9447133765e58f0f19aed795468db54222ff1","size":7434,"data":"","first_seen":"2026-09-19T13:35:01.573158Z","last_seen":"2026-09-19T13:39:46.507289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/6988.3a5ca3e5319b257e.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"213e714b827647564ada990c956ee2f6","sha1":"a53e82111a89ac82c2079e1daf728b15d9b6548b","sha256":"ea1c54dd34053037f1032fd3167ba56a84f745c1eab18596f3a428dc4f8d9518","sha512":"9e32203fdfc2129a22021555024df5d6a2f502e8934b5ad1aa031c19db9cd6bf2c106d101adefebba6b1dcfdac7f59d3410f13c4473c7d96114e3105eae00aec","ssdeep":"6144:w6Y6XCF5FSYzXEFFsQ7egZjy+euB4Y0YgTD3Cnqp5YAQJLl6keqqGySt92bcQBd0:JNzVTnqgyAb7","tlshash":"e3944c957362f43343de915ed82a1201f3395869140d842cf7b8acefea84998967ffb1","size":422189,"data":"","first_seen":"2026-09-19T13:35:01.653727Z","last_seen":"2026-09-19T13:39:46.421745Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/3885.ddcbb70fdc24b3fb.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b35aefa62c646ec408b52d25960a9f","sha1":"b6818abb48dfd8839ad745404db68fa9796f05c8","sha256":"ff2f9864a9eba5f32d1f21d7e29a04a497d5387c9fa3c6413bb3eecbde48ffa5","sha512":"5dd943d1526f19445eb072820968edfc4fe1990674359d6443048b4c16ccbb64287f6cf0ff8ee87c358cf68f13f2f2915b9b62fbee68bbf58e2451bf58ee40d2","ssdeep":"96:Mz+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+BR:MqpiD470sd9s","tlshash":"9eb1666da5b96ceedc37e48fdc18670d80207f17ee0449f1a999db4f1f25818b4e9540","size":5225,"data":"","first_seen":"2025-09-10T05:14:21.971951Z","last_seen":"2026-09-19T13:39:46.511439Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/100.41a00bce.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f67f467ba0c7bcbdd9cc8e558f9b8c9","sha1":"eecdf27afbbb62ca68dc78b2f598b08d4cdd40aa","sha256":"16b6bcf10bce57d2acc46e742f41cecb8f5e3ab285027fc2bbcfe49efc36622d","sha512":"282702ca2da550f8403735188bf54209979c0df940e2865ca67e81a0a2650d69a8e563490034e83ffd882dcc13a7863238f42c8677183db2aef13e759beb7096","ssdeep":"","tlshash":"2ec0123d1150fe9c3d5f16d50c598f5774d43165957dc5513c5b885d4115538c2dc858","size":176,"data":"","first_seen":"2026-09-19T13:35:01.538679Z","last_seen":"2026-09-19T13:39:46.487489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/3447-39fc61932db36c6c.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc327e68bfd0224b4a2ae57427773d88","sha1":"b58d5701bd30c64257ab19fe5d92ccef2e7ca999","sha256":"644612644b88b79197a978ebf07523e488b43470f5e73a30efc6ed08384d56af","sha512":"b9a799ba0fcda3a83de466e73e9687036b59bee64ecdb177d6695f5e0e89f2d5711352a479105d29d518d56b99fc6c3a7b3e21ca4cf1290b7e4748567a027d98","ssdeep":"768:092tGLTXdZEuEQuIthtIPbgi71OGmeREB8:w2tG1ZEuEp4XI8eTmeRv","tlshash":"59e2f9e432b2f1d612d328e240ef8487a236ad44695d21b9f60c99f93cb1589633ff75","size":32216,"data":"","first_seen":"2026-06-13T10:41:54.376992Z","last_seen":"2026-09-19T13:39:46.477295Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/4071.7d8b1e4801b59c81.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fec45608e2071332287da8a2bfa6645","sha1":"734d059635e88193f642e9d16cc1e45386223919","sha256":"921addc43e4762e644923fc79e0384a3bd3a5736cf7aab1e24d21971000b5a9f","sha512":"e6a3ee397ea029d87f7d328d1c537a9d894c6f0b23baca7173c4d0daca82910eabff0c875f861c6a75060e6696e1402a780ffa3cfd55f6ae118360ffeaf1518f","ssdeep":"6144:OFe4ziVSIthSfHZ0Z1LU/yz6kWKUQEJS1eLvLGCw/xx2tcx4+Tbyx+EgOf7hI0jL:qe4qSfHZ0ZJEyTya0ANvSd3EkiRjg","tlshash":"c9b45c517376f436039b819ea8a92201f2345898541a803dfbfcacdbef8498955bff71","size":511394,"data":"","first_seen":"2026-09-19T13:35:01.687554Z","last_seen":"2026-09-19T13:39:46.480372Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/202.5df75d4d4742b4f9.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d9dd8e1812fc1866e9da78913e1c108","sha1":"8c607bfb71f4a52ed019841aefa9ad4e56b6a5cf","sha256":"26d7b925fb27721166808b8054e0ced6c87f5412e842c94be9687898852fba68","sha512":"b5763f7565b8daf1737e771d7edeeb7f328c82b1967ba67968e9abe8db0a59e5706c93bca0f1341d936053d5c205eb37f2ce9d9691f1fd2d2a02b8a50724056b","ssdeep":"192:o9QSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdO4:oR4pjZWQufLsSEBovGSjedtqPq2qSq/","tlshash":"6b42ebbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","size":12099,"data":"","first_seen":"2025-09-10T05:14:21.987401Z","last_seen":"2026-09-19T13:39:46.417694Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/7038.0528908f.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4ab40dc747cfce2e031b48082cc8599","sha1":"4a40558c7f9d0774f82d811cfde734dbd963aab4","sha256":"55289ffe14493000d8de18a916e172dd4f32182c9496fc98603a9a363911b50a","sha512":"f9afc45119b06cdcb498e1789a3913c3660d193fc348dafa6dd336a774377bc1d048aabd946ff7ff7f08634c4093c03fee47ffd461ff01d3ed3d3798f9ae0592","ssdeep":"","tlshash":"9c71ea133660449cd19a421b12ad132cf9d8291d693e865832fc8c3d72bbbf0717db5e","size":3572,"data":"","first_seen":"2026-09-19T13:35:01.595741Z","last_seen":"2026-09-19T13:39:46.489923Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2834-a3d715add6adde09.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"751356694899591b71cfaa113c89c66f","sha1":"9a319b65fd7fbed964d54c2fdc0ce7a82b7bb471","sha256":"90b09a57c2fb09344e4a196def7acbeab26784b79fd4c470206fe6e97b1a5abb","sha512":"64c4f4363a2b87aacbe7e2fd6c4f211da8f97a98c4d19ad9d172a59b01aaeadb36104056ff715ac9aa5004169d8ddd2a6179ef847d44733facb37c2b2a9ac63c","ssdeep":"384:7aLFoZrBxz2Je9C90heXz/aXx9aFpJ4287ZwI1EmYa6o4Rv72wA:7aO8/1D/aXxIpC2pNZA","tlshash":"d772b7aa736455b793de478b18ea0405e3f4a8943459482cbf8c7ac3b929ce950fdf31","size":16199,"data":"","first_seen":"2025-12-21T11:58:15.786493Z","last_seen":"2026-09-19T13:39:46.476734Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/1018.0c5c65dc4eb34763.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca2531916dcd00b13948ef40ca57d1b","sha1":"18f3afc623093ae3aab09a5bda76c11b5a4d76a7","sha256":"3e32aa6bee6f241ad8db6d1a144e9ca70a138314a35b272115e9119f3f37136f","sha512":"b195492d1813c9a7dcabca081749399739a1a0f10b0135dcbdff5117d29d13f1538b43ea997eed393d7d392418ff6b26d168aee20c0dbfa939d82de7a31cc4bf","ssdeep":"384:OQGtuALThn1OeOpEyFUfwNoc5ehYpTiNDFxPJGdCRtq:+4IqeOpEyFUfwNo7YANDbDW","tlshash":"8dc28784b7a5b03943925291146b141bf279fe6c948c18acf2a0e4f728b68dd94fff74","size":27646,"data":"","first_seen":"2026-04-27T08:22:55.148751Z","last_seen":"2026-09-19T13:39:46.465498Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/6295.c5322959308a02e0.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a3472586cb3a8a1716c1f9448e47a74","sha1":"5f5f34d3d67375d5cc4f5ea8130fa6af75933e3e","sha256":"0a9add1f2514b239fb8a15bb97cbe76b034aa7d716101f3083fd4e6ba491ee86","sha512":"41d71842643ef27a1bd041e441443f41251e1d051695845eecb2407a3143d302545c689458a6e7920004c54910a516ac064e241c9f8a28de18e0820633ccf6fe","ssdeep":"","tlshash":"62417baf30b03cd9d43bc5639829301d61b22d3bfe2d9a569bab62647e75c5420e4633","size":1982,"data":"","first_seen":"2025-09-10T05:14:21.952672Z","last_seen":"2026-09-19T13:39:46.479706Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5339-36e713a77052666e.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d376ae6f164cd14ee722ab9fe5860387","sha1":"c3a8876c58cfa0a059ad3b4e40536099095655ec","sha256":"68c0f3ee3713732f9ce50243aa121a06c066a9c86915c1f8a3dfab23483f8164","sha512":"37ce95cc08ee10856c9ec93c9652f8577ad37bb83c88a654cdcb15ac66a3faaf109bfb0f415faa4393b6cd042153022e09069e4e0f19b4e1b5a51796dd9afc2c","ssdeep":"384:cd8Tz4N3jobbmH7CLHPGsTgyPskGshamP8jLrPqOpvAJ9K/NBC9lmek6TTEVFADD:cd8Tz4N3j4bmH7CLHPGygxPqOpvaENBA","tlshash":"6eb23254b165fffce92b5aec711e942c611e2b98c91b8578f5b93c301a885d4ba03bcc","size":24086,"data":"","first_seen":"2026-09-19T13:35:01.597157Z","last_seen":"2026-09-19T13:39:46.508969Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SJBNRGF7GN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf8e95c907b08b9edb8ce01f7022639f","sha1":"2f300ac8c664408943717d47071166575e03a405","sha256":"2e91ad37551ce8d7bd618ebb4d217520679e0444d48d9a7dfdb61fd5a8c747cc","sha512":"b4efea857467a47ce7e45fddfcf5261d7d60ebdb01c65c879d2d0ec19db7ff47703d25c16e111c31de2a6020545ba701be9352bb5b292823e761a170f1f480e5","ssdeep":"6144:HxqbI1rBQ5PN1gbcn76+4bcc6MbBEAF33GBAmrc1od45znljf:HYY29AbqxAx1oK5Z","tlshash":"51b408ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","size":523820,"data":"","first_seen":"2026-09-19T13:39:46.499007Z","last_seen":"2026-09-19T13:39:46.499007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/7880.26a690b6.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2d6de97c55c65048ad8cb957b1d5ebb","sha1":"b30567854be54ac12b4b7d7e89da415e48b99761","sha256":"3dac4a73f4869c5deb527289728b07ac0c6530765fc5dd0f002e6e6ea4d2d22c","sha512":"6d8044a8e9a7a542c7eb1554056e9936af749e06f72d9631e563a6f3deb661117718d4fe7e0f3d4ad5e315add03e740b384ccf1d7db4d93afdf87c004bdd1a12","ssdeep":"384:WCxcbnUrkg6EF3R3apDejUQLIhw9i6c5+pCqNFaiE8E0QIQfJCQGtVU+Bf2X+pt6:WVbOdapsgc9NwlJCx8+LEj","tlshash":"9903e5c8b2d3b05d627378b5447f6006b23e7d94641d8842c523e5d97ca9e2e913bfac","size":38269,"data":"","first_seen":"2026-09-19T13:35:01.659163Z","last_seen":"2026-09-19T13:39:46.488949Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5604-e4236010bc4f753e.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f8cea9f0cbbaefeb61c052ab87a5193","sha1":"e060be63856eed4d61c8579efc66995a22082e22","sha256":"ac097064c7e07759e06b2b5220559a27ca1b930a91a40a20520c00a2c8325135","sha512":"10024d7da7b813e804d5a17ec32d5ae80643b5111db23ff290d925bf7d6436f9eeb42764b358365f82618746486f1ace5a6ccf17c851174f6faa479c45e4794c","ssdeep":"1536:QcvYxEN3NpnQ2oY8pG2gwTN2nwSreTDL3v9aCS6+Y/p5Y99xzY:5N3NpnQ2oY8pG2gwTN2nwSreTH3v06Jl","tlshash":"3c33f8a0f141b1622a4303d5802e0309af7e78b4574da46bb3ad9ed71d61cca4a7ffb1","size":50304,"data":"","first_seen":"2026-09-19T13:35:01.547004Z","last_seen":"2026-09-19T13:39:46.482217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5242-6b5dae94862eb97c.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"748d9210343e2be00840fdc6ccc53f79","sha1":"029b51e46d5c3ab34bde4ff9195684fe81c6ad42","sha256":"e90f83c91d7336d26533276dfe0f0f20b6aef7c5bf641848ed4321ede6431ddc","sha512":"f7a60d00a05a63f9af7f1bcdcf32edf00dce175d42e13d7c546e08ec5569d051c1c612ec30986cf503f909fd9cd5c1384645a860eaae2790c7d57fd5c09b3996","ssdeep":"768:9hfqrxAQi2Uhm6jozgrCLU//vuOhd/FElK3B1laqRCLObS+VY6zLCsCLCjiSFI8b:9hfYLUiglDOKRzLP/FI84iO+/n4I","tlshash":"ba330a987161febcf96f45a87a5e810c711d0b48ce1e8638f6bc7c2625885d4be13bc8","size":51036,"data":"","first_seen":"2026-09-19T13:35:01.693722Z","last_seen":"2026-09-19T13:39:46.432018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/412.827f0a8e11715fd9.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5f79403b9d397c445271938a4e8c83","sha1":"e19d5f6a3421d3c3468228997a3189af2e138cdc","sha256":"f9d7afd944bf312e8dd3c7aea0e4d616e7e188609f1adfbfc68b1eb8a302b9c2","sha512":"d07a971170a4dc755c69a3fd1fe9251f96d489bc3897bacafd994121d3dfaaa68b87fe29c381ef6dadf12210d489eb982c900755ec557309e774bb5eb45cf9d1","ssdeep":"384:PpByhqW2xs3dwktSu6foTLEQD4zrlqPqI:PpBSqQ3p8BrlqPqI","tlshash":"00b288ada2320d497c3bed6bfa89790db0203fcb8915a4b98f61b154cbd354df2d0651","size":23723,"data":"","first_seen":"2025-09-10T05:14:21.959195Z","last_seen":"2026-09-19T13:39:46.512363Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2333.adaf47f1bbf1bc9b.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"721ceb77a8a557b0f426369e68d7ec9c","sha1":"21c7b7fe2078a0018b633711a6515b2ad78ec483","sha256":"cc54f935efa07dcf8285e7a2220b598739a8e249d30d2d76920edf8984b42527","sha512":"0f4496301a6e65cd42cc8677d4d57575c56a63796815f4c3e608e9d5dfff540c5716d1f5c4e1599bf17b9807664c9b31e88569264023e19fe38b87bcdb71e8a1","ssdeep":"","tlshash":"e541e17d24f07d84993ac2a38401332e51653e7bfc39e8d5ed46603ae91a80431d8e77","size":1924,"data":"","first_seen":"2025-09-10T05:14:21.930178Z","last_seen":"2026-09-19T13:39:46.443494Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5294.f3aecac26cf633f4.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b395cc45368f89911a9d66db024e4d","sha1":"3b7ac4d36cd69cce3864113085bf5f253347d0a4","sha256":"d248227354b0e8f866d1411b862e15454c80dc3cc3d85df470f7b483501d9ea5","sha512":"524209051e9046b6060119d879354b86bbb253a62c203819a8496689f3e1f4dc2e24e0c7cb22d5a5ffc5e161722784e86b9183b8acf488a839246e1c7373a0e6","ssdeep":"","tlshash":"364132be29322d4e78738c57df891a4d7122ef7bce14a866ce691218cd6371971a0a31","size":2308,"data":"","first_seen":"2026-05-23T13:18:14.688945Z","last_seen":"2026-09-19T13:39:46.485056Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/main-app-6d5d720c85676648.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f325257fd9b8fa22cfcaf8169d086677","sha1":"91c40269dbe29c5407c93875a1db4e0626bb0d59","sha256":"245030b639bdb303f6ca6d86260118fe205eeb058b29755b59175c503cd40977","sha512":"3bb638c1d698a76e63db7bbad4a1696035df75064f378d627b22f08d2c92eaf7827f1c200468eca019629c1ca69b3be42ca6265ccf39f798588520b4b13f9a2a","ssdeep":"","tlshash":"38f0d65a4f0cf52f5c26ad74fe97ace2245f4175202b4e616901eea13c23bacd270404","size":572,"data":"","first_seen":"2026-09-19T13:35:01.702126Z","last_seen":"2026-09-19T13:39:46.475904Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/537-61b3a839df2e4b43.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7d84b68748c1ec20a3b001cc1eed36d","sha1":"25bfc7785343398e352632c14eabfb565702f685","sha256":"847f2c655f1183ffdf160243458e0f94c34ca4ab8f66dac5cff90039d7a1814f","sha512":"132e4dee9eec9a61843c4ae25366776de5c0f98dd1adb763318f3ed366c28ab966c4c1053ebb6fc6f2e5c13e2610cb9bd539a09ecef147982ac9ff93b01278a0","ssdeep":"96:yMBOU7N6mp61fD0Re+MOrsmBc0NOGhiqRv2Pl/PiG3pK:HsfDIe+MOsEY0v8/7M","tlshash":"3e91b7c6bae0f59a075325f3183f2546f33d5528a818e450d660ecf478e681e523af3e","size":4309,"data":"","first_seen":"2026-09-19T13:35:01.666437Z","last_seen":"2026-09-19T13:39:46.425686Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/app/(public)/page-5f53d9d1daf8cd31.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b47f888f4ad8967931c5c240a379e444","sha1":"d6ea4b0d51098ccc97a7cd2d1c77cbec90facca0","sha256":"287ef746471bc54ed36b9493dd3b326409564484b91687b4c4a04d914f6a1b94","sha512":"4d41d727e4a97c00ca6f637d5cfc1222a8bc76535024dc85c8efbada3c62dc4a864f9376826b7bbb648882a8115dc98bdc481815e8093fa2721e2571dc8284e2","ssdeep":"","tlshash":"33c0c09340833444b8fb091908f034b070cc105b386ae0b241220c5034f65cc4270f00","size":173,"data":"","first_seen":"2026-09-19T13:35:01.633968Z","last_seen":"2026-09-19T13:39:46.483881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2619-04bc32f026a0d946.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c358925a71873c489c9acf268fcec12","sha1":"920c46adfeeefb53491083e8f0167ff485bb5c0e","sha256":"a9b6c2213ea787a015c0169d198b4a90d7a44a0cc17abb0d132e8362d3016ced","sha512":"4642c5b3998c2ed71d006501a710a64b8c58ce5310963dd3ece3f4b4010e8ffef9df1364e33cb575869705f78893217bcdabeec60f947afd64fcac6a60339892","ssdeep":"192:w2cihbWekOYxxURMeobT9jZHYOHC0dwMcGW/j:RxUGMFvjimwMcGWb","tlshash":"0b02c8e675e1f8e2836b0190443b100bf37e1db5181e9184e3a95ce6f9b046dd1b2faa","size":8564,"data":"","first_seen":"2025-09-10T05:14:21.968653Z","last_seen":"2026-09-19T15:46:09.288979Z","times_seen":5058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/1255-ab54a41c275880be.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa6781c69a1456d45560e479368246e","sha1":"ec1b0257f26d55006092170c6813e7dffcaaaf01","sha256":"299b8250c227201cb85d3fdf64e396c21570088508695adbc915941e666d9aee","sha512":"4f336f2bc2f43e3445a74869a41db3b1e12107ad2251882ce3c1e3bd5a7e2bd9c5954e3a247bb92e99e9e5ab39c067b2c679b5398847287a7b5fe112f8ea7b1e","ssdeep":"1536:bzigN+KcB/cO5HYHqLVcX27yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNwrky/Sz:37MtmA+ey4r904Aj44RNsz/Sz","tlshash":"3904d9b676d0f8e107a780e5843b400af3291c37146f74a0a3e6dcd975645dea1b3faa","size":173892,"data":"","first_seen":"2026-07-04T14:20:28.171895Z","last_seen":"2026-09-19T13:39:46.508322Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/widget.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"babf8f2cb29bb0f1cdcbfd36eb6fde60","sha1":"81bc6a3ff4784e2af5c0e1cea34819ad16242e5a","sha256":"be1ca786bc2d4252b84fea58d9ba652859ea80b1c09765811875405f74daff80","sha512":"261756a539d74f0a6f9770ecb1c1241415fe661852d5156ba042debda56c2be64c0efdaa9f3dee23f991cf9eeb8a063fe81c55fe4e3f973fa71ab8bbb38daa3c","ssdeep":"6144:ZKaAFH+Tuab3VQvkQKznf9zRG5/yqCwAkaW87ryn41lBjZTHoxqZ+aEiN4SQv6Zo:PAFH+Tua9vjkJkTHokH4Sc6qnHct6Ge1","tlshash":"f9e47b56f260907819b3016a617e2716b3383a0db81484a8736decfe73899d6713fb7d","size":698035,"data":"","first_seen":"2026-09-19T13:35:01.590117Z","last_seen":"2026-09-19T13:39:46.46003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/6175.c202d296.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cfea5dfdf8a1d8e61347f92e06d6d15","sha1":"9e17b433ff25a7f0df011ee6dfb9c34d656e7dc3","sha256":"81139c2b3679b73c178f37ff3dfa90fd4028179f62d0403d5821e540c2df402e","sha512":"d26b2fd86a8553a12a64a5cd5609827dae9d78178fc168c93923a16e2572785c36805d73b574a0c1f772cd4468cd8dd580673c7c092df75e47abdd9df8aa1ac8","ssdeep":"3072:LzKS/t2RmtA82g2c622K9Sau2/2jJ0b5UXqPwr5854Rl1T3PnsuXYKEMHKxGa71B:LzKS/tzZ2jJ0b5UXqPwr58GrSeY2KxGQ","tlshash":"9e949a1e01159ebddac8b3939412dec9a7e4b063c2884e6c30f5c9a9cbc1bbd3645d76","size":420165,"data":"","first_seen":"2026-09-19T13:35:01.699153Z","last_seen":"2026-09-19T13:39:46.416719Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/1386.8710ea3172239880.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a590031651ccc9662d66bc42ac572ad","sha1":"c616a2b6005871ffd7b4d0dc627ca608769b198e","sha256":"98dfcbfd8d301db08c7e9df86d16b4893b3bad5af5b0f90691c2b25085dae307","sha512":"1021ba1e0506578095c1cf77d7e98a92478356e039e66e3335ba7dace93e8e6cf8ab8e5376dbee3d149ab3b9a990a22c2a80126dbd871ef9b1a4a30aefcf2504","ssdeep":"","tlshash":"c21159bd913468c9b822d5635a396789f223a9a7bcb144d2e896b703ce1490c664dfb0","size":1007,"data":"","first_seen":"2026-05-23T13:18:14.644234Z","last_seen":"2026-09-19T13:39:46.495007Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/app/layout-68228afc49e0e077.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3588e5fd14632a3c29bb12ef3c589","sha1":"f97908e72f93ccf6897b5f1519c1f66c70702fe2","sha256":"c8eed9de177b50e65df23b7c8362a631b9fdd1de3659bf6938cfdee2689165b9","sha512":"bc23b83367d6c956eae094c21e9e08e6d33b18294e57c7965d307035642f637645aac66413f72768a6060fc3740723bbe270504e84ed6a363b8daca375755511","ssdeep":"192:S39odPqXy6UhgC3HLgiVEBdng9b9E+CtFer66:S3Cdcy6kgyrt8gp","tlshash":"d7e14df632c6fcb543a78cd094378207b6192d37241fa450a7eacce07165d8cc1a1f9a","size":6970,"data":"","first_seen":"2026-09-19T13:35:01.564691Z","last_seen":"2026-09-19T13:39:46.514109Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/4bd1b696-100b9d70ed4e49c1.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a9c2166a0ae63c27a466c7fb5903d80","sha1":"51f1c90c3f1e1d32d0c81e836ded7ed5ba0601d6","sha256":"5421e13a91a9389517b66179f3b4b5eaa0d95245438066d4d7b19ac30aeb809b","sha512":"8dc6274f2637076f1b5c4cd3f61b14259ec5552d844245c8b93a64f19c8b6b7347554a03b994b0f880b7dae74ad65e54eaa00be81783c2cedbae82a7fd4b89dd","ssdeep":"1536:DWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:Z9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"ecf3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173025,"data":"","first_seen":"2025-08-21T15:49:50.637902Z","last_seen":"2026-09-19T16:13:44.950468Z","times_seen":16307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74dcb394beafafb8a23a27e3308b4db5","sha1":"fee62e454fd21d921b001d88d05bae99e6e63a76","sha256":"a70717086346d046d6adc16b9cdfff37fe731e7aadd60465f9fc9512fcb05f2a","sha512":"f108e4d5735d9c4c035b443e2ee843dc805f365280a018a594aa6669d4c72c282ed06b2f34d8f5bc9e5274492e397326b995cefcf9cf0ddc01f99e48a4912e05","ssdeep":"","tlshash":"39c09b8c31479d7195fb1b410b6ff715f1513310d8a15c71091573445b21c176794854","size":142,"data":"","first_seen":"2026-09-19T13:35:01.726709Z","last_seen":"2026-09-19T13:39:46.517494Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/7195.15b3afcee2020a76.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea56cbd62ed2a2b7758cf3fb5e2eee6b","sha1":"374564d8428306b5b113495c58bb02a7f83fa146","sha256":"4ab693087b7f5205600c8b1d0712ff3c4873ee5d1e4005a17bf6a7946a98f678","sha512":"939ee01f60467636f174256eb2c55fa0e322e8f86679eab2b071b7cd719825a340230455385b22d774477c7a468fcfc4e94723463acf20f180b76a9db98693be","ssdeep":"6144:fZLcoSfupzIkF7RNoek9eFadmtbPA7/qBXh7/sSmIqk8ru5:Rh2eAxIaY","tlshash":"3b548e94b351b078cfe720aaa4273205f2316d4594cd8859f7e4eaa72dec8c85397f39","size":300219,"data":"","first_seen":"2026-09-19T13:35:01.685195Z","last_seen":"2026-09-19T13:39:46.486056Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/3324.766c073e.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b0a7a7ad2564c54a2594480973191a","sha1":"054070aed77ceb2abb5cee4a2aaaf3a12bef9c98","sha256":"b1457e09208ce9b2cf785da3dba4527f004abdd2e5bae6c1e36a901c52c14edb","sha512":"03d12bb01e8436b04cd9e4f19d2f3cf62899156f4af3c142bd51654b1352c6d1838a1c8a800cac0e9d193265d13a53db5fc38aae926ed2b180cfb7da53a8ce7d","ssdeep":"1536:q4TBba9qj6qe1pR/xXWEb48Ze+hXk1GIgHYY:vBbg1XWEbH7kgHr","tlshash":"aa737d7d3a24612809ab5fe5a2bf495433bf251c34008698b33d8cf565999ecb05bf7c","size":78051,"data":"","first_seen":"2026-09-19T13:35:01.63124Z","last_seen":"2026-09-19T13:39:46.45583Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-19T13:39:46.479097Z","times_seen":1280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/app/(public)/layout-7ee9d23e15552ebc.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"979503ad2b08f5a4f5dde3f3bb2f2f75","sha1":"88d35b47ef4992d124c74b95f07e06f642d3ae1c","sha256":"aca767a4b87ec6e820d6327c7024490ab859348993c08e552d712072f5d9ca60","sha512":"57bdb9f32b158fc4d9a0110329ccc3f611a47144c9f3a7abb0d5b0f26d1f64cb1dca9b643e688fe2b5d34b1b9e28e126092dc5aea2555e5376763c649c3777dc","ssdeep":"","tlshash":"96e0808f4709f44f5c17aea4fb956dc1385b4037341b4d616134ed61257378cd370458","size":358,"data":"","first_seen":"2026-09-19T13:35:01.67057Z","last_seen":"2026-09-19T13:39:46.429424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2090-c9f6dd94d94b56c5.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b33c73ecdd6fddf945250fdf9865e393","sha1":"0e6979e4c41407b7bf2e3563458652d763630e49","sha256":"5a2129d7a25916a6c428bfec737e6f97f4cd555e4bee5f04b65675b5c2b7d0d0","sha512":"3a8a0bf74a22d2a5751d070fb79ba52b36fb9d712bd9d7c723198ae9ba06cf5402560d7498c1159fca016b6b9b45b89e518a5fadc7d225958bd8f06c66814e2d","ssdeep":"384:P3Yi03xiBPIsCL7XbMB+lNjTCLwM2mECCsCLLcdPiiCLiDCLJbCLnHSssL:PIi03xiBQsCL7Xy+PTCLwHmECCsCLLE2","tlshash":"6072f8507241bd3de59b059c706fa00db22f2fa5da1e8824f7adbc5e2191ac8a152fcd","size":17230,"data":"","first_seen":"2026-09-19T13:35:01.614974Z","last_seen":"2026-09-19T13:39:46.458185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/4e88bc13-ab3f72ca0d0cf2da.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4404a48c6a445459f6c4018188fa9f9","sha1":"44d7c836220492af651a4baa675a17c92a97c45d","sha256":"84afff9cb5a40bb7e76719ca6f83114a7fab1aa0821be3aa13703118fe408ac9","sha512":"6b734424edc0a166917b2f831cbfb603a00ad6966a069aed6a7d7dc37557dabe3ea521c4da842cb0bd8287d1636c27c6ed4299bc04a7d38fd0d9a8898e0fc796","ssdeep":"768:Poe5Y5hERL5F9rJzI3Yn4zLhzTF+0PqPRj6zDHPVkBKDgh6HUbN72Of/oY19j1ln:wtwLtOonDHs/hcXr19j1etpGjL","tlshash":"4ae3f852b660e00c725bc11e16ea5918f6522fadc93c5a3412f1af2c2971fc07676fbe","size":145591,"data":"","first_seen":"2026-09-19T13:35:01.56114Z","last_seen":"2026-09-19T13:39:46.49802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/246-a8281c8214af9451.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e44e185c171e99789308c00601e4559a","sha1":"49012efa142ad71484ed92e056f3fceb73a36ca4","sha256":"97dc837ce9e6bcad6067372dc6f60931f83c8bfaef2e6996ba6642dccf8d24e2","sha512":"a0e8737b164b8721966431e10b78cbed617fed2713f0bb97c202a7471c08b9287b2b307d066b5c2aa4700b018a2f14f76b21d0f90538293d8b0e3b3fa754a9c6","ssdeep":"6144:mlGyiVdAvMTV4BNoYomu1uzAFZAqvArmmpWD8C5lXuUPPwi3ry+/0oLmHYid1Nfy:mwyiVPDYon72br6DBqHY5N","tlshash":"01c45b99b321b5b687db51c9942a0040f234b999550d002c7aece8ff27badd8d4faf35","size":558361,"data":"","first_seen":"2026-09-19T13:35:01.57543Z","last_seen":"2026-09-19T13:39:46.438532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj75 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj76 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"coinswap.now/faq?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.489Z","timestamp":1789825119489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /faq?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gCdqmQgxfws9QN3qRdCFJ%2BhvH1O4wBFyDZ1ynnayWoZaSnEl8horUCkHjYF%2BtZSy%2BgNfedVDnoP2l9nahCMAyvrekDTRRPC6Yhj2T3mrQ2zPMDT6zZHiErnanoKHV4%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf4d897569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148,"size_decoded":1034,"mime_type":"text/x-component","magic":"ASCII text","md5":"31c76b0b0f5feb0621a896adac4016fc","sha1":"cf1a35265d43140acda226e10c75d2739efacd7a","sha256":"2c20a69e6412ffe834c6331b6594da3209e5f9d4ad92d88bcd0f630bb70865f0","sha512":"d72ee36cd1855f79a1d6543c60d8b2cf477def5f011a6deeeed5e7ac0f951aaefdf1629de857c8330840a2a7adfa249f2f63d167f271fadb4fe5cf94a5696f2d","ssdeep":"","tlshash":"94c08c2543003df22cbe1084016cc58f360f020f31de2cf1b0a21a10a37702049072d0","first_seen":"2026-09-19T13:35:01.661515Z","last_seen":"2026-09-19T13:39:46.410156Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/eth-to-btc?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.573Z","timestamp":1789825119573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/eth-to-btc?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80h3t%2F2iKuVJAfLUFuBoGkPWSaAvvllVFo3N0Z%2B6e6aDfLtZOxWlMjXsQy%2FL5y4KuJKaSeVtfNdMY%2BfwtRF9laOz%2BSxPcShhpYivNOVTrnrRnWulSPUBdMNIiDPB448%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf558a9569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248,"size_decoded":1068,"mime_type":"text/x-component","magic":"ASCII text","md5":"d4dae34a0490095b6c439b1c845ad38b","sha1":"a4333168faf4db9c4d5b56fac3bd4bac396e6486","sha256":"23e89cc884b7e0a1baddfd75c7389e8807f600f78f3ee637e07d2f84c2a65128","sha512":"4e221788a92f377201931a661496d416e506fe281de19e13e3c27e604228576eaecfe0dafd2bb090131d7383e482d4b808fbf3bc93aa7a5f44e6185e22459106","ssdeep":"","tlshash":"d2d05e3302122db72dbf20d0443ed54b390f192b229e1df490a11e2963b2aba9583ad5","first_seen":"2026-09-19T13:35:01.709762Z","last_seen":"2026-09-19T13:39:46.412152Z","times_seen":2,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/eth-to-usdc?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.700Z","timestamp":1789825119700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/eth-to-usdc?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82RePS%2FLs%2BUV1U1x6CCBIchOSEhp%2FDsbSrL5UqgkBwxvj%2FpsDC5BLEW5BYfXjgccrHt2ERkySYDpx4mZfIVGbYmUbvC74OTVhYQ6guf8063ueTp2b5PKvWQFTkydvCU%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf628c7569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1067,"mime_type":"text/x-component","magic":"ASCII text","md5":"d314aaed4f3e9fb6f3ea9f68a845659a","sha1":"4ccf8f79ae95e28285e75bb0904c7384f0a69966","sha256":"0831763d90a4d12f9f466514264b657dd39055eadf2f370cc9ed5a9b7142f5a0","sha512":"24216288aec075906ed969970e9c42b3f97bcb409fd93fd10666e7788d52d9d6c1039de54a66560c5fe101f99291cef98b264d3322573fed31137ff67816c2de","ssdeep":"","tlshash":"2cd05e33021229b72dbf60d0843ed44b390f192b229e1df490e22e2963a267a95836d5","first_seen":"2026-09-19T13:35:01.600988Z","last_seen":"2026-09-19T13:39:46.413307Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/6175.c202d296.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.219Z","timestamp":1789825127219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lane.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:06:50 GMT","end":"Tue, 08 Dec 2026 21:05:20 GMT"},"fingerprint":{"sha1":"98:88:A3:D2:35:EC:94:87:06:23:4B:11:C0:0A:1A:1F:9B:CF:B4:9C","sha256":"62:D6:D0:BD:0B:E6:ED:F1:18:87:D3:9F:B8:1D:47:29:ED:C9:31:A0:D5:99:CC:96:D8:9E:F6:82:28:DC:71:01"}}},"request":{"raw":"GET /js/6175.c202d296.chunk.js HTTP/1.1\r\nHost: cdn.lane.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 16:33:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e10f48-66945\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 202670\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUx3AqwwdeOKGK166FeRj1FiXKKCG9y%2FUe%2FFDwTKOK%2BFYcOx9AcOXxFWcm%2BMAUEFuGSKsb5BuGB2FA4TinnBiTTR8GtxlfPz4GacqHRYj9lab%2BghjWTpX2pcQ5IVJ9LF\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fe252adc0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420165,"size_decoded":81905,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63931), with no line terminators","md5":"7cfea5dfdf8a1d8e61347f92e06d6d15","sha1":"9e17b433ff25a7f0df011ee6dfb9c34d656e7dc3","sha256":"81139c2b3679b73c178f37ff3dfa90fd4028179f62d0403d5821e540c2df402e","sha512":"d26b2fd86a8553a12a64a5cd5609827dae9d78178fc168c93923a16e2572785c36805d73b574a0c1f772cd4468cd8dd580673c7c092df75e47abdd9df8aa1ac8","ssdeep":"3072:LzKS/t2RmtA82g2c622K9Sau2/2jJ0b5UXqPwr5854Rl1T3PnsuXYKEMHKxGa71B:LzKS/tzZ2jJ0b5UXqPwr58GrSeY2KxGQ","tlshash":"9e949a1e01159ebddac8b3939412dec9a7e4b063c2884e6c30f5c9a9cbc1bbd3645d76","first_seen":"2026-09-19T13:35:01.699153Z","last_seen":"2026-09-19T13:39:46.416719Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/202.5df75d4d4742b4f9.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.460Z","timestamp":1789825119460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/202.5df75d4d4742b4f9.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"2f43-1a057e3d8f5\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuAUpXzN5tuJkUDqEahmhJ9q7JR9bYmSf2HHHBnYEdUt98tOhZ%2Bw6cCDicu2%2FTlu2r9RlvLV0Ys3WgZXU84QKkAdZ%2BgM8ohyoBoDtQEfwqS9vlPTYq%2Fs2YhMpR0aUns%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf4a88b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12099,"size_decoded":3867,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12099), with no line terminators","md5":"6d9dd8e1812fc1866e9da78913e1c108","sha1":"8c607bfb71f4a52ed019841aefa9ad4e56b6a5cf","sha256":"26d7b925fb27721166808b8054e0ced6c87f5412e842c94be9687898852fba68","sha512":"b5763f7565b8daf1737e771d7edeeb7f328c82b1967ba67968e9abe8db0a59e5706c93bca0f1341d936053d5c205eb37f2ce9d9691f1fd2d2a02b8a50724056b","ssdeep":"192:o9QSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdO4:oR4pjZWQufLsSEBovGSjedtqPq2qSq/","tlshash":"6b42ebbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","first_seen":"2025-09-10T05:14:21.987401Z","last_seen":"2026-09-19T13:39:46.417694Z","times_seen":42,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/eth-to-usdt?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.577Z","timestamp":1789825119577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/eth-to-usdt?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryhJfXe0JJ%2Bj5rYjOtbglIol93lPr%2Bdg7rjbd8%2BWtgmQ9FZU%2FrahsW8GhLBZmMCrVPsxBRDoX4phJwf7AyGHNc0V1%2FysJL1byX%2FBCElASUaS7DlNw%2BPMozeDmegEd98%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf558ac569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1073,"mime_type":"text/x-component","magic":"ASCII text","md5":"3d08a5b75a045a084c366943e370da08","sha1":"8f1b72d770dedcd0e2a6805d438c18fa79c0cc77","sha256":"46f67f4c7b2afed4337b1045af07045d0f390ed20b379e6c31303499e38a1cae","sha512":"b3545238bd4de6775274781af612a697e077c08b61f87e0216d81978b39017c358de55ff7d7bc1accc9536447de47e379ddc702d034f368e26bf79bef934cf16","ssdeep":"","tlshash":"1cd05e33421629b72dbf60d0843ed44b390f192b229e1df490a21e2963a267a95836d5","first_seen":"2026-09-19T13:35:01.624776Z","last_seen":"2026-09-19T13:39:46.418476Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/xmr-to-eth?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.851Z","timestamp":1789825119851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/xmr-to-eth?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsd5UR3Wqi7lG0xkmapiuKJhIEPMt%2FkJg4W7K3zSoKfyrz5eebChfwEXLQU6Y%2BBhI9WULVq%2BeKnJ4H3QiBnIc6PJ89LNG5z2qrYrHf%2FLyEGagr%2FcTYl5vdxA5Ztbr0Y%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf718e7569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248,"size_decoded":1070,"mime_type":"text/x-component","magic":"ASCII text","md5":"f99a276e4f84bf8a566a70ef0bad0d84","sha1":"3222ca9d3a171ec15a5c84de10120c66e0d54475","sha256":"cb92dab11ef67e01dde042e2a68a0ca8f77e44f41f88aca86b0bdf2c99d181f3","sha512":"3990adcebabb286daa2ab8c911f3d025f0e98caa357a675576f47094aedb2a493f32d16b1573051b2ea3edceb8db89b9bb343dabc20df9d9e42fb3fa1049b0bf","ssdeep":"","tlshash":"06d05e3302122db72dbf10d0443ed44b3d0f592b22ee1df490b11e6963a267795836d5","first_seen":"2026-09-19T13:35:01.717732Z","last_seen":"2026-09-19T13:39:46.41988Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/icon.png?be25b264c3fd1ea4","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.363Z","timestamp":1789825119363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /icon.png?be25b264c3fd1ea4 HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/png\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=31536000, immutable, no-transform\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 19 Sep 2026 13:33:50 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wiuTgbCoxeJeMpadhRP3i4BP0sq8KLNUFZzAYaE6RXE10J0CZ5cljWAnc3sbS2Hrjt0jey9bJ3z%2FqVbIlq9a5uoSHjQfr%2FzuXcynwbERE8%2FcANzCXswN0Rqnmjteo4w%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: a3d8fdf4086f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14849,"size_decoded":15667,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"64f0332ce59e901528999684e3986c79","sha1":"d7fe24a28db382d6258f2ce8008bb2a67bcb8851","sha256":"bf9c753f6acaf1249f31660eea611e463064e532660c0c318211fc46b1a9275f","sha512":"ba2d861e3569b4eb2d52e66581c56a3746b2b85b9f940ceb2029f2c244ffa537db1295f77ce54d33313f3d218a3bb4c544213de9b23f93ec11b21785e0404f93","ssdeep":"384:YkxWZzoJkOOKXnDRLNny+kt9cEq0yQLh8SIp+yb:YkAZzoJkLMlkHZLhLIT","tlshash":"c862c0e6931a81b49e7d82dc3e8deed23d50f2a002c940752bac6033591574bbecbf81","first_seen":"2026-09-19T13:35:01.639331Z","last_seen":"2026-09-19T13:39:46.42068Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/6988.3a5ca3e5319b257e.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.367Z","timestamp":1789825119367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/6988.3a5ca3e5319b257e.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"6712d-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OeD7JayHVO0HmBzMkmF9COziLA95nHdfcxXxGnufkHFtLjKVUHnQigIQtzVBmqLMxjpX5fuLTxT3QFrh1JIk4mzcsFSccHjvuAzaaZyOLQH8URvodTvMvnAUDpnpxVE%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf40872569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422189,"size_decoded":118289,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65484), with no line terminators","md5":"213e714b827647564ada990c956ee2f6","sha1":"a53e82111a89ac82c2079e1daf728b15d9b6548b","sha256":"ea1c54dd34053037f1032fd3167ba56a84f745c1eab18596f3a428dc4f8d9518","sha512":"9e32203fdfc2129a22021555024df5d6a2f502e8934b5ad1aa031c19db9cd6bf2c106d101adefebba6b1dcfdac7f59d3410f13c4473c7d96114e3105eae00aec","ssdeep":"6144:w6Y6XCF5FSYzXEFFsQ7egZjy+euB4Y0YgTD3Cnqp5YAQJLl6keqqGySt92bcQBd0:JNzVTnqgyAb7","tlshash":"e3944c957362f43343de915ed82a1201f3395869140d842cf7b8acefea84998967ffb1","first_seen":"2026-09-19T13:35:01.653727Z","last_seen":"2026-09-19T13:39:46.421745Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/usdc-to-btc?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.681Z","timestamp":1789825119681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/usdc-to-btc?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17FSa5LJ65rAX22QPMkrehdS7JzZMvrggoKg1kd2LsWoNOg6eGdwciuZqXXNuIGFkskFAtspXHXWAngcxG6AfNbXJoGN74ANVaEdG2EBrl3V6%2BXjoHq8lIdt7Gp8YLI%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf608c3569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1061,"mime_type":"text/x-component","magic":"ASCII text","md5":"8638783adbad532c1eee13c380701832","sha1":"a7adea3b409330eb2221751b75d430ea328c439f","sha256":"fcacae6545dbfbdf2f6de676dee4bb074766656356978bd476ff4dc9f4e62a27","sha512":"e009ebf650c5accab0e632e9f4f0b6b0593e84c240fd866de426acbd25189bb4a6050b58522aa0adbf55b547903147a946bbf29a8f4f69780a7f3bc43a2107b4","ssdeep":"","tlshash":"98d05e2302222db72dbf10d0443ed54b794f192b239e1df490e11e2963b2ab695836d5","first_seen":"2026-09-19T13:35:01.657833Z","last_seen":"2026-09-19T13:39:46.422676Z","times_seen":2,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lanechat-cdn.com/v1/chat","fqdn":"api.lanechat-cdn.com","domain":"lanechat-cdn.com","tld":"com"},"ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:46.617Z","timestamp":1789825126617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lanechat-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 17:53:01 GMT","end":"Tue, 03 Nov 2026 18:51:24 GMT"},"fingerprint":{"sha1":"84:02:8A:2A:79:FA:27:E3:B1:DD:32:3C:B2:AE:50:44:C5:14:91:38","sha256":"8E:F6:4C:BC:2C:2D:D3:0B:0C:C6:8B:15:AD:71:C6:42:24:F6:99:85:B1:04:EE:D1:CD:7A:34:88:27:45:02:99"}}},"request":{"raw":"OPTIONS /v1/chat HTTP/1.1\r\nHost: api.lanechat-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://coinswap.now/\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:46 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ba33EZogY1C20z4NWxFEsNR%2BmZlL%2FqqaCRprYvdLAtuEFjwn6%2FrC6f4MWuW0arA%2BjoGt3gjrBWOiHGLiWGmXjUTNTKvIttxMUIovT%2Bn4sKzM9VX1WT3Tm521%2B9QbbtKTYdMFelu0g%3D%3D\"}]}\r\ncf-ray: a3d8fe218ccf32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":727,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":10,"connect":14,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T13:38:38.447Z","timestamp":1789825118447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/logo.png\u003e; rel=preload; as=\"image\", \u003c/_next/static/css/6d5cbee384a6db98.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/css/b28e53eb9759515d.css\u003e; rel=preload; as=\"style\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\npriority: u=0,i\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5AOeu1jRkoHvQlHiFATWWpz%2BbM%2FK2Neh5PAgV%2BxYJqVaE9YgZNJjAXapsggX2ib6w1sxcDYzw0pFaphKVlCu2yFRMqN76u41x3hjJloHYBeT3h3MUanb4128X3HNuA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d8fdee9fef569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119552,"size_decoded":22988,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65363), with no line terminators","md5":"533b6c1a2344f520ab56c684984c0500","sha1":"69ec09d2ff858f2af9834541ef41b754215c6ce6","sha256":"633dcd5010a3f96e43ff65f0e2da2615e52a3099bb70c987a782fe8dc4e24334","sha512":"ac06ee3c0e4b29afebdd261760185a938d0e1e2594fc2b82539d25ec733a24bd2acedb61c10a726f61ce2b30c1e7b76d02b891543151b877def96782faa787b2","ssdeep":"3072:juh2r8iCAiIwUw8yky2KWvAA6iQLxDgqXYyA3G:jw2r8iCAiIwUw8yky2KWShZW2","tlshash":"25c3a73a7200d93fd8bf4e5a317e6d36518f825aca6acd3df1ddd124128187caa679c0","first_seen":"2026-09-19T13:39:46.424354Z","last_seen":"2026-09-19T13:39:46.424354Z","times_seen":1,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":27,"connect":20,"send":0,"wait":190,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/537-61b3a839df2e4b43.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.076Z","timestamp":1789825119076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/537-61b3a839df2e4b43.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"10d5-1a057e3d905\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGoiWLbWwbYd6BIbrigzHeXa7gMLf6ekD64klQ1WqQM3WY1Mdo7WDVn7kGIMmnoIzXTtGOUQVaIzhFKzKZveu9mVCbmN5x66%2BUQyVGG9CsuZccBCH5ABAqIOEprj7MY%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf23832569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4309,"size_decoded":2500,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4309), with no line terminators","md5":"f7d84b68748c1ec20a3b001cc1eed36d","sha1":"25bfc7785343398e352632c14eabfb565702f685","sha256":"847f2c655f1183ffdf160243458e0f94c34ca4ab8f66dac5cff90039d7a1814f","sha512":"132e4dee9eec9a61843c4ae25366776de5c0f98dd1adb763318f3ed366c28ab966c4c1053ebb6fc6f2e5c13e2610cb9bd539a09ecef147982ac9ff93b01278a0","ssdeep":"96:yMBOU7N6mp61fD0Re+MOrsmBc0NOGhiqRv2Pl/PiG3pK:HsfDIe+MOsEY0v8/7M","tlshash":"3e91b7c6bae0f59a075325f3183f2546f33d5528a818e450d660ecf478e681e523af3e","first_seen":"2026-09-19T13:35:01.666437Z","last_seen":"2026-09-19T13:39:46.425686Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/1094/small/photo_2026-04-13_09-59-16.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.117Z","timestamp":1789825119117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/1094/small/photo_2026-04-13_09-59-16.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\nx-amz-id-2: t6zxe4aiqd9U3O4VAVT5NstK38eynwRwSOH+2MvL32kXHrG+BLXts5tHB1149RaSn2JLooeX1Pc=\r\nx-amz-request-id: XSPBSE73WYCW99FA\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 13 Apr 2026 02:45:15 GMT\r\netag: \"ab3490f6d3518cb542da5895305b207f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: l7BuceMjfdIO.xYwYbd4TBBk.9fcsoEq\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2708\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 336303\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf2998e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":2626,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61500be6644731950efe3647d6fe4b06","sha1":"1db385db98fc5944fc1b7603201c02063b27f3d2","sha256":"87b493c22c8eadc0deb7ce449f8c9efc76361d4242016b59f6c9a586abf42b37","sha512":"6f9aeaec5208394621558ceba1667aac2826b36b637b8f87dd2cb747bc67fdf1f24071c60ac71d37082791e44c0ba41b88e1c32f970781c32b37dddd1057a920","ssdeep":"","tlshash":"ab311a9f915ac3c4ea36c9312108128385316821e7994ccf0bc3ae6397783f1e53d049","first_seen":"2026-09-19T13:35:01.542586Z","last_seen":"2026-09-19T13:39:46.426612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/btc-to-xmr?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.814Z","timestamp":1789825119814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/btc-to-xmr?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7T1A3uxWPWduzuvMHSfBX82w59K%2Fi8Kz4mx2Qk3t8f2ZedmTaTIrrs0evMirG3Vsew9azgchBicQbdBO8A24MFolGFO13dBKPU1%2Bg2eUHi8l0DcQjTV4Xc1o%2BoCQmY%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf6d8dd569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248,"size_decoded":1065,"mime_type":"text/x-component","magic":"ASCII text","md5":"d57889d4dce1d9e097ca12adedc5b3df","sha1":"43ddf57a05757be754194d7df0cd7157887e7762","sha256":"d7b2f15a4a3b4b92255ac8739ea5addcb43025182884e916ff6d02c2174ae2b1","sha512":"c73527956fd05021f1c50def6dfcdc82161ba66d144d6557f7674d9905f4e13c9f2c4b090d5772602c717c5cdc3494c8cc6fdfbafd224f7869f86e658c2e268c","ssdeep":"","tlshash":"8ad05e37021629b72ebf10d0443ed48f390f192b229e1df890a11e2963a667695836d5","first_seen":"2026-09-19T13:35:01.545443Z","last_seen":"2026-09-19T13:39:46.42748Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lanechat-cdn.com/v1/usage/start?host=coinswap.now","fqdn":"api.lanechat-cdn.com","domain":"lanechat-cdn.com","tld":"com"},"ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:46.949Z","timestamp":1789825126949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lanechat-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 17:53:01 GMT","end":"Tue, 03 Nov 2026 18:51:24 GMT"},"fingerprint":{"sha1":"84:02:8A:2A:79:FA:27:E3:B1:DD:32:3C:B2:AE:50:44:C5:14:91:38","sha256":"8E:F6:4C:BC:2C:2D:D3:0B:0C:C6:8B:15:AD:71:C6:42:24:F6:99:85:B1:04:EE:D1:CD:7A:34:88:27:45:02:99"}}},"request":{"raw":"OPTIONS /v1/usage/start?host=coinswap.now HTTP/1.1\r\nHost: api.lanechat-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://coinswap.now/\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1odgdDQqNKxBVdhRlyiCTs8H6faQoLS8eP9m3YvnSuz8tMEXJRh%2FZBYur5t1M%2Fbj6nT5jSUe2LAdMXkv7tS24rsfMsHfQLaxN63vXpWZ1OL7emyob0K8l5YbQc3f6%2BtvIlKRRfHqA%3D%3D\"}]}\r\ncf-ray: a3d8fe237d2a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":721,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.lanechat-cdn.com/v1/load-messages?chat_id=1000023715\u0026limit=20","fqdn":"api.lanechat-cdn.com","domain":"lanechat-cdn.com","tld":"com"},"ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.231Z","timestamp":1789825127231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lanechat-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 17:53:01 GMT","end":"Tue, 03 Nov 2026 18:51:24 GMT"},"fingerprint":{"sha1":"84:02:8A:2A:79:FA:27:E3:B1:DD:32:3C:B2:AE:50:44:C5:14:91:38","sha256":"8E:F6:4C:BC:2C:2D:D3:0B:0C:C6:8B:15:AD:71:C6:42:24:F6:99:85:B1:04:EE:D1:CD:7A:34:88:27:45:02:99"}}},"request":{"raw":"OPTIONS /v1/load-messages?chat_id=1000023715\u0026limit=20 HTTP/1.1\r\nHost: api.lanechat-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://coinswap.now/\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUdDhs054k0limY6skIdPPmQKNcjeu3vm3fccdoKHCxJkaVCqbm89mm8BWHsavow90QeuKYHOevOL69M4CMCnYneCG%2Bhl2wbCT2Zd5y%2FaqeteWZ0PGsztpy7R21AM%2B7tbnOI4DiHCw%3D%3D\"}]}\r\ncf-ray: a3d8fe253dd832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":721,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.lanechat-cdn.com/v1/knowledge?app_id=app_8d8ef4186cc3857c885dd96a65b2fbd6\u0026limit=8","fqdn":"api.lanechat-cdn.com","domain":"lanechat-cdn.com","tld":"com"},"ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.429Z","timestamp":1789825127429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lanechat-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 17:53:01 GMT","end":"Tue, 03 Nov 2026 18:51:24 GMT"},"fingerprint":{"sha1":"84:02:8A:2A:79:FA:27:E3:B1:DD:32:3C:B2:AE:50:44:C5:14:91:38","sha256":"8E:F6:4C:BC:2C:2D:D3:0B:0C:C6:8B:15:AD:71:C6:42:24:F6:99:85:B1:04:EE:D1:CD:7A:34:88:27:45:02:99"}}},"request":{"raw":"GET /v1/knowledge?app_id=app_8d8ef4186cc3857c885dd96a65b2fbd6\u0026limit=8 HTTP/1.1\r\nHost: api.lanechat-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 119\r\nx-ratelimit-reset: 1789825187\r\naccess-control-allow-origin: https://coinswap.now\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Accept, Origin\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, no-cache\r\npragma: no-cache\r\nexpires: 0\r\nx-cache: MISS\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfKcWk49Oedo2tVV2wxvJiJqqJD083bT3R74WuCk9KW%2Bo21HJPvd33%2B1vaFgmJqyVctOWyaJq%2BZhilgG%2Bun4d9g1uq9TgQq%2Fk%2B%2Fn0iVL%2Bmr%2Bm7Llfr7olnYRH3bpiiIiMmRA81Bggw%3D%3D\"}]}\r\ncf-ray: a3d8fe267e0632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":1187,"mime_type":"application/json","magic":"JSON text data","md5":"142ff67ba626eae56918d733fdad7406","sha1":"63c08bd61c310f272d0387a27c126d65665a8041","sha256":"15b12d0a88ed8bf3bb198a63b6388e39152d9621e60fc67c666bdc45f2d049eb","sha512":"26844e2ba9bd59dfd5174fc9288a290f287f7b54e6aea8632701baa97b993ea7616681b2d04ec2b44f0bb8a09bfc705f2a8bf81a8fa4671bd49b7fbbc4e36a21","ssdeep":"","tlshash":"39900413141c1dc34f0174cc041f474451f710474d000710ccccd31ccf0d0557541530","first_seen":"2026-09-19T13:35:01.664413Z","last_seen":"2026-09-19T13:39:46.428559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/app/(public)/layout-7ee9d23e15552ebc.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.080Z","timestamp":1789825119080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/app/(public)/layout-7ee9d23e15552ebc.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 10 Sep 2026 09:50:28 GMT\r\netag: W/\"166-1a08ab9cebd\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\nage: 288\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lx0mpie7koHv6IQdIus8GaI2qTi2V1AsG0qVytTne6HpCRvU3%2Beh%2FK1otajqXi5I1u%2F74dXdOKpY260RSdqC1P0Jt0ZsfIDQnfF6CV9TCGlUded3fJQfcTkb1hc%2F4XA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d8fdf24834569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":992,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (358), with no line terminators","md5":"979503ad2b08f5a4f5dde3f3bb2f2f75","sha1":"88d35b47ef4992d124c74b95f07e06f642d3ae1c","sha256":"aca767a4b87ec6e820d6327c7024490ab859348993c08e552d712072f5d9ca60","sha512":"57bdb9f32b158fc4d9a0110329ccc3f611a47144c9f3a7abb0d5b0f26d1f64cb1dca9b643e688fe2b5d34b1b9e28e126092dc5aea2555e5376763c649c3777dc","ssdeep":"","tlshash":"96e0808f4709f44f5c17aea4fb956dc1385b4037341b4d616134ed61257378cd370458","first_seen":"2026-09-19T13:35:01.67057Z","last_seen":"2026-09-19T13:39:46.429424Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5242-6b5dae94862eb97c.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.089Z","timestamp":1789825119089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/5242-6b5dae94862eb97c.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sun, 02 Aug 2026 16:04:50 GMT\r\netag: W/\"c75c-19fc33889d6\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHcNWq9PYZ7H57lU%2FU8KjcBEZeVOSkD%2BIXILE5M3zYzSoZzXAQc8yHg1LAMOVcu%2F6Qk1VzoYt6OF3NAbLqm7xMABCr1nFLJq8TAwa99Q4CxBv3ZJ7M2%2FuDxvZbAIOwM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf2583d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51036,"size_decoded":15443,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51014), with no line terminators","md5":"748d9210343e2be00840fdc6ccc53f79","sha1":"029b51e46d5c3ab34bde4ff9195684fe81c6ad42","sha256":"e90f83c91d7336d26533276dfe0f0f20b6aef7c5bf641848ed4321ede6431ddc","sha512":"f7a60d00a05a63f9af7f1bcdcf32edf00dce175d42e13d7c546e08ec5569d051c1c612ec30986cf503f909fd9cd5c1384645a860eaae2790c7d57fd5c09b3996","ssdeep":"768:9hfqrxAQi2Uhm6jozgrCLU//vuOhd/FElK3B1laqRCLObS+VY6zLCsCLCjiSFI8b:9hfYLUiglDOKRzLP/FI84iO+/n4I","tlshash":"ba330a987161febcf96f45a87a5e810c711d0b48ce1e8638f6bc7c2625885d4be13bc8","first_seen":"2026-09-19T13:35:01.693722Z","last_seen":"2026-09-19T13:39:46.432018Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/1/small/bitcoin.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.109Z","timestamp":1789825119109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/1/small/bitcoin.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\nx-amz-id-2: Z7H+IoBdk0O5ixD2X6DwICWWbpMq2qiZUszht4d1OILv2CWcfScFJKWD+pujeBSowwpR4tZAyag=\r\nx-amz-request-id: 6ZHR5JFN453F2MVP\r\nlast-modified: Tue, 07 Nov 2017 07:39:53 GMT\r\netag: \"a8850cb1a50f04f848166f3a66f34b5b\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2514\r\nage: 532887\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf2997e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1480,"size_decoded":2315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1778487809fd5fba49f5e41b3047b6b","sha1":"0c7c64e98442fcf95f33a7db86c3a1f36ebdee31","sha256":"454b919cc500351e96059db53a300f692f142304f44f79a9ac3126c98053c201","sha512":"e6cdcdcee7ce104260e412517fac609bc275cec9c3b27bf1a5fe2d793dd8d179d22f4de41ed7d013e53ab5773ae85b140616d97a421443de8656c58c9daca396","ssdeep":"","tlshash":"d031b521bd370aff06f0455ac0b09711a6c60eb48212c984aaf3eee8b6279058199019","first_seen":"2026-06-27T06:17:42.867948Z","last_seen":"2026-09-19T13:39:46.434181Z","times_seen":47,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/5/small/dogecoin.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.124Z","timestamp":1789825119124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/5/small/dogecoin.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\nx-amz-id-2: W8dDEqjwDltNjJ7KZXKhgqWJXRLaV/1Ibblt+t8cjnHpnQJF5gWPbeIEI1vi4zUOJWfXbn7h3lo=\r\nx-amz-request-id: MW56V3KP73TAN3F9\r\nlast-modified: Fri, 18 Jan 2019 06:17:37 GMT\r\netag: \"3fe73d0936ccf1dc5467ec873cdaf72e\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=4857\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\nx-content-type-options: nosniff\r\nvary: accept, accept-encoding\r\nage: 662386\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf2999f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3382,"size_decoded":4217,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aac7ba312bcc2073238bd11c4699aae1","sha1":"e8616426a3436526dad90b200a7390893a4711c8","sha256":"382d37b24ed5f14239ec41b3dbe3e8750bed11891f48140dff49e6a0efc6dd8e","sha512":"b1716530834442d84b5ffe9e8869eb1e285e31d5b8f64cf4c5ca0b2a757d8e384a3f4b4d2c488bee87cc94e4b8b15ed45f11ff219f07fb8e538d36c6597df778","ssdeep":"","tlshash":"8b615cb3294f5fc77982625b910d6f3705c71251689a9ed7e13461137f28280a0dec41","first_seen":"2025-07-30T23:38:21.192723Z","last_seen":"2026-09-19T13:39:46.435401Z","times_seen":41,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/eth-to-xmr?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.820Z","timestamp":1789825119820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/eth-to-xmr?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oF0nECDYzTW6HLlYem1RN6KHlR1Zu5jBgSi71xkan74%2FT8r%2F0io%2FW4QyCPy8hUzaXQfxvvzA1EhI5ZS%2FepKhfFHdX3bRAtzb2iz88AscQr2qL5x005tXi7Cjq6C%2BapE%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf6e8e1569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248,"size_decoded":1069,"mime_type":"text/x-component","magic":"ASCII text","md5":"c791a4d816793070b199e3e385d175bc","sha1":"ebde6b5a05c15a4ec411f1686f3e47e756e115c1","sha256":"36b038c8cfaee5242c3784acf279396c7c9aedaa3a93b65815cc4b1e61afadc6","sha512":"1d8f1e0fd999042f76e0d01d6564443a0ccec29d0c10f85105e4249bd9c27764bbc155a34bda1305c9cce5365aedad875656a53473257aa9283a0791b56cf3f2","ssdeep":"","tlshash":"efd05e33021229b72ebf20d0443ed48f390f192b229e1df890a11e2963a667a95836d5","first_seen":"2026-09-19T13:35:01.628049Z","last_seen":"2026-09-19T13:39:46.436282Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/sw-lane.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.501Z","timestamp":1789825127501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"HEAD /sw-lane.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120; lane_vt_app_8d8ef4186cc3857c885dd96a65b2fbd6=4cbd2aa5-b5ec-4346-a774-e2ece840bb2e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 20 Jul 2026 08:51:47 GMT\r\netag: W/\"17ea-19f7eb9662a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2BZ0MIH90WUk6pVzeMEg%2FBvquztLDLyd9S07TfZjXTbQ1f2JGu69VjC5skwkNjnDoyh9vGPhXASdzeeSP0VYZM%2Bm1GJSKTCXVD%2FVqEDtF%2BiDI95jztHkLLtWpnOkxjw%3D\"}]}\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8fe26ed7a569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":805,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/246-a8281c8214af9451.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.083Z","timestamp":1789825119083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/246-a8281c8214af9451.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sun, 02 Aug 2026 16:04:50 GMT\r\netag: W/\"88519-19fc33889d6\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Fk7RdTv1%2FX4Gpjk7erfk7RsVAH%2BzwLyX2EPi%2B16A2RYKRHemgWCdIUHE39SMG4E5iTGYQsk7N7arkMvkOrfHQBLB1CFTFb8rHa6ZPJXIr%2BNpO2Q29TLpT553xQIayY%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf24838569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":558361,"size_decoded":185724,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e44e185c171e99789308c00601e4559a","sha1":"49012efa142ad71484ed92e056f3fceb73a36ca4","sha256":"97dc837ce9e6bcad6067372dc6f60931f83c8bfaef2e6996ba6642dccf8d24e2","sha512":"a0e8737b164b8721966431e10b78cbed617fed2713f0bb97c202a7471c08b9287b2b307d066b5c2aa4700b018a2f14f76b21d0f90538293d8b0e3b3fa754a9c6","ssdeep":"6144:mlGyiVdAvMTV4BNoYomu1uzAFZAqvArmmpWD8C5lXuUPPwi3ry+/0oLmHYid1Nfy:mwyiVPDYon72br6DBqHY5N","tlshash":"01c45b99b321b5b687db51c9942a0040f234b999550d002c7aece8ff27badd8d4faf35","first_seen":"2026-09-19T13:35:01.57543Z","last_seen":"2026-09-19T13:39:46.438532Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/325/small/Tether.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.111Z","timestamp":1789825119111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/325/small/Tether.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1500\r\nx-amz-id-2: QLHEbMOP3BbNEZhi9MXXZ9rzMaZxdCijMyJxD5SCKl9e+n3cGby5bWkp9ov7Hixl8qFkN4CSHPw=\r\nx-amz-request-id: AKPFZF4QWWZ045HH\r\nlast-modified: Fri, 11 Nov 2022 06:37:45 GMT\r\netag: \"a660dd0441f12c1508a01e9d6fb031b6\"\r\nx-amz-version-id: 6oKs_8YPOAwF.s8SZfyLjcrW5Vz4NczM\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2160\r\nx-content-type-options: nosniff\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 730858\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf299952efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":2362,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"b14c84466b515fed216797685c8b6006","sha1":"dba5172a374bfda5d9fdef144737764da7956640","sha256":"89d573c0788f88f9334995e8f8906cdb0dc689a6248cae29f3c08a746cfa333f","sha512":"7857a5eb2561c6a08f53fa2071a3006be0b6a6f586044dc1a72b1e7a572c5ea06f3863ce4cd14d7b5d338a31cc5151819218c6bbed6019debc5548302e6e04a3","ssdeep":"","tlshash":"7d31f703766da8cccda9f3f586833884e43acf1f1d91b0582aeb651df5579001ae0226","first_seen":"2025-11-06T19:07:54.989951Z","last_seen":"2026-09-19T13:39:46.442174Z","times_seen":231,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2333.adaf47f1bbf1bc9b.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.450Z","timestamp":1789825119450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/2333.adaf47f1bbf1bc9b.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"784-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahmV0V34i0bJfxsbZiWEQZbMAJQVF09c8OQ7B3QNWlWstr5DrF9j95ZeRuQLNJbLp17OLjwHVfHoVzSL0u5CEJJWmh5PklySAk3ekhm8oAtlNHVhykxp7ErHoj6rgsw%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf49881569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1924,"size_decoded":1584,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1924), with no line terminators","md5":"721ceb77a8a557b0f426369e68d7ec9c","sha1":"21c7b7fe2078a0018b633711a6515b2ad78ec483","sha256":"cc54f935efa07dcf8285e7a2220b598739a8e249d30d2d76920edf8984b42527","sha512":"0f4496301a6e65cd42cc8677d4d57575c56a63796815f4c3e608e9d5dfff540c5716d1f5c4e1599bf17b9807664c9b31e88569264023e19fe38b87bcdb71e8a1","ssdeep":"","tlshash":"e541e17d24f07d84993ac2a38401332e51653e7bfc39e8d5ed46603ae91a80431d8e77","first_seen":"2025-09-10T05:14:21.930178Z","last_seen":"2026-09-19T13:39:46.443494Z","times_seen":26,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/btc-to-eth?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.490Z","timestamp":1789825119490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/btc-to-eth?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mR%2BrUzUYZtYxC0y1XWRdcXTcES1xv67eWgU01nBXhXJ6yRHMWsTYKlX863FAPjrnyJt8lIiqm3JrnqMo0upkchQUVBYY1bptulwKV8yifEwPo7uzKgiDz9vgOua8hm0%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf4d898569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248,"size_decoded":1061,"mime_type":"text/x-component","magic":"ASCII text","md5":"cacb43bcc1afd01f9ebea761941c389a","sha1":"411e9d3fc4cd1a41d6864a54ea7b1ed4b6bd4f24","sha256":"5d1516724156a69a03a4a919265863c8e421a979ede02b124afdf77c430591c3","sha512":"c8e7590e8071080415b98a9ff7c753c717783f74cb1db6c87ffb817ab827efd94787bb9f7f2825bc05e2ee1d3fd96ad9fa3ee59d320061cfa28873082b5a2cef","ssdeep":"","tlshash":"07d05e27021629b72dbf10d0443ed44b3d0f592b22ae1df490a11e6963a267795836d5","first_seen":"2026-09-19T13:35:01.706978Z","last_seen":"2026-09-19T13:39:46.444439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/btc-to-usdc?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.657Z","timestamp":1789825119657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/btc-to-usdc?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pn7e32RmEKtc0k2QC8j2FAh6qW5W0ubIQcCAasDhgSoBI7oK7DLo%2BFKU5KKrMwV%2BTqk5hh6OvAgeEDKsFCcvnKVN1F2XqK67EvAn016OvMXueJtuT78249bfr8ZkNoM%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf5d8c0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1063,"mime_type":"text/x-component","magic":"ASCII text","md5":"d7c6684567ed7d036e9ff5f397f8cd97","sha1":"64da37e28e972ae9cb5f4d533a088e772365b891","sha256":"f51e23ffbb8e8b7f6696ee75e0328af9a61a2a2b5ede0ba533ec237af579cf7d","sha512":"dc36afa85412c7cd26844d56e50b8d1a97e41744cea8e3f4ff32754dfc44a2a91ea8a47598fe8d45d732c733c941d5343185fe9beb2423d01f4a124d2d3b74c9","ssdeep":"","tlshash":"37d05e27021629b72dbf10d0843ed44b390f192b229e1df490e22e2963a267695836d5","first_seen":"2026-09-19T13:35:01.626507Z","last_seen":"2026-09-19T13:39:46.446521Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/3324.766c073e.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.222Z","timestamp":1789825127222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lane.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:06:50 GMT","end":"Tue, 08 Dec 2026 21:05:20 GMT"},"fingerprint":{"sha1":"98:88:A3:D2:35:EC:94:87:06:23:4B:11:C0:0A:1A:1F:9B:CF:B4:9C","sha256":"62:D6:D0:BD:0B:E6:ED:F1:18:87:D3:9F:B8:1D:47:29:ED:C9:31:A0:D5:99:CC:96:D8:9E:F6:82:28:DC:71:01"}}},"request":{"raw":"GET /js/3324.766c073e.chunk.js HTTP/1.1\r\nHost: cdn.lane.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Aug 2026 01:12:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a713c97-130e3\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 202670\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHCWv9CX%2BFjhbWCf5CUshRnj6JxqI2WEli2E5laRJBUXI6lga5opQGDXl0yUKv49ATa3sQjSrHr0pgzbeRf5arho5M%2BFWSALXV646Z1XcjZsD81mN56m3jJGjeBqxVEa\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fe252ade0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78051,"size_decoded":28117,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65469), with no line terminators","md5":"f4b0a7a7ad2564c54a2594480973191a","sha1":"054070aed77ceb2abb5cee4a2aaaf3a12bef9c98","sha256":"b1457e09208ce9b2cf785da3dba4527f004abdd2e5bae6c1e36a901c52c14edb","sha512":"03d12bb01e8436b04cd9e4f19d2f3cf62899156f4af3c142bd51654b1352c6d1838a1c8a800cac0e9d193265d13a53db5fc38aae926ed2b180cfb7da53a8ce7d","ssdeep":"1536:q4TBba9qj6qe1pR/xXWEb48Ze+hXk1GIgHYY:vBbg1XWEbH7kgHr","tlshash":"aa737d7d3a24612809ab5fe5a2bf495433bf251c34008698b33d8cf565999ecb05bf7c","first_seen":"2026-09-19T13:35:01.63124Z","last_seen":"2026-09-19T13:39:46.45583Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2619-04bc32f026a0d946.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.075Z","timestamp":1789825119075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/2619-04bc32f026a0d946.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"2174-1a057e3d905\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6XgQYG4KdFR4ANqfF8GnOj9lCaLYak8OZ0gnYFplhk0mS13KdchPDQjCVij1piUdIRedIBE3SYaOKc2sLlkrP0CCdZEyPKXTxCs0KL9CY1YJEBZHlBMc52Bsf1mUBM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf23831569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8564,"size_decoded":4199,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8564), with no line terminators","md5":"3c358925a71873c489c9acf268fcec12","sha1":"920c46adfeeefb53491083e8f0167ff485bb5c0e","sha256":"a9b6c2213ea787a015c0169d198b4a90d7a44a0cc17abb0d132e8362d3016ced","sha512":"4642c5b3998c2ed71d006501a710a64b8c58ce5310963dd3ece3f4b4010e8ffef9df1364e33cb575869705f78893217bcdabeec60f947afd64fcac6a60339892","ssdeep":"192:w2cihbWekOYxxURMeobT9jZHYOHC0dwMcGW/j:RxUGMFvjimwMcGWb","tlshash":"0b02c8e675e1f8e2836b0190443b100bf37e1db5181e9184e3a95ce6f9b046dd1b2faa","first_seen":"2025-09-10T05:14:21.968653Z","last_seen":"2026-09-19T15:46:09.288979Z","times_seen":5058,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2090-c9f6dd94d94b56c5.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.079Z","timestamp":1789825119079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/2090-c9f6dd94d94b56c5.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"434e-1a057e3d905\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8VEdoWYl348QwwfeEk4LK9erz7jre6ST%2FB2rTWBpYX3QY9%2F6j1mscT12TQ9cJb9Idb0ErrRMJIx%2F1l2pUUto6qK2yYWnsCFv9dtxTVbm1v%2FZhDKUt491eif%2BLlC2g0%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf24835569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17230,"size_decoded":6913,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17052), with no line terminators","md5":"b33c73ecdd6fddf945250fdf9865e393","sha1":"0e6979e4c41407b7bf2e3563458652d763630e49","sha256":"5a2129d7a25916a6c428bfec737e6f97f4cd555e4bee5f04b65675b5c2b7d0d0","sha512":"3a8a0bf74a22d2a5751d070fb79ba52b36fb9d712bd9d7c723198ae9ba06cf5402560d7498c1159fca016b6b9b45b89e518a5fadc7d225958bd8f06c66814e2d","ssdeep":"384:P3Yi03xiBPIsCL7XbMB+lNjTCLwM2mECCsCLLcdPiiCLiDCLJbCLnHSssL:PIi03xiBQsCL7Xy+PTCLwHmECCsCLLE2","tlshash":"6072f8507241bd3de59b059c706fa00db22f2fa5da1e8824f7adbc5e2191ac8a152fcd","first_seen":"2026-09-19T13:35:01.614974Z","last_seen":"2026-09-19T13:39:46.458185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/2/small/litecoin.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.119Z","timestamp":1789825119119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/2/small/litecoin.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 650\r\nx-amz-id-2: FJwianUlBoGvINeOxhB4GQ0HsmKD1KF0sawUOFQgRhhEfNBV8iFmgcE8OZcPDhcIf4D99rfwwjQ=\r\nx-amz-request-id: WAC35PD73TPV9E37\r\nlast-modified: Tue, 07 Nov 2017 07:38:17 GMT\r\netag: \"e87c135f3b5401282c3099270e20e944\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=1398\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 56426\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf299a02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":650,"size_decoded":1483,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3428414b3289d86d845a64744d22bd77","sha1":"9dfe440fbad461099516e8ff85a31e9e0dd9a255","sha256":"856cfba073ac9f76eb8ce5a3e9e86637f842a175140aef91a08e25af885f9818","sha512":"e5e0b384043e663f2b17e859ae875fd0782d3668a4a11dc12c89a12a5e251fda8ffd020cc0025eec003078e3432732ceb668a7006623807996026de440842f1a","ssdeep":"","tlshash":"1ff06810c786b688734d2c964431ded435be31d577d6aef8f033396307991dd3894a9a","first_seen":"2023-05-07T22:03:16Z","last_seen":"2026-09-19T13:39:46.458956Z","times_seen":30,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/widget.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.448Z","timestamp":1789825119448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lane.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:06:50 GMT","end":"Tue, 08 Dec 2026 21:05:20 GMT"},"fingerprint":{"sha1":"98:88:A3:D2:35:EC:94:87:06:23:4B:11:C0:0A:1A:1F:9B:CF:B4:9C","sha256":"62:D6:D0:BD:0B:E6:ED:F1:18:87:D3:9F:B8:1D:47:29:ED:C9:31:A0:D5:99:CC:96:D8:9E:F6:82:28:DC:71:01"}}},"request":{"raw":"GET /js/widget.js HTTP/1.1\r\nHost: cdn.lane.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 13:38:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Aug 2026 15:55:54 GMT\r\nvary: Accept-Encoding\r\netag: \"6a79f48a-aa6b3\"\r\ncache-control: max-age=14400, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2B1vFLPif1bhdRRAcKfSFK6aRXMusvdzrORpXVAWc%2FP7YkaBd1czzmNMIjxI2BtsEzboEItumchqnrxo%2FL3dulgIJ%2F9VQ%2B6nt5YHiND0uWZcu50OOHsPS%2BwTq1peZP0F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8fe1cd947b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698035,"size_decoded":188639,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61228), with no line terminators","md5":"babf8f2cb29bb0f1cdcbfd36eb6fde60","sha1":"81bc6a3ff4784e2af5c0e1cea34819ad16242e5a","sha256":"be1ca786bc2d4252b84fea58d9ba652859ea80b1c09765811875405f74daff80","sha512":"261756a539d74f0a6f9770ecb1c1241415fe661852d5156ba042debda56c2be64c0efdaa9f3dee23f991cf9eeb8a063fe81c55fe4e3f973fa71ab8bbb38daa3c","ssdeep":"6144:ZKaAFH+Tuab3VQvkQKznf9zRG5/yqCwAkaW87ryn41lBjZTHoxqZ+aEiN4SQv6Zo:PAFH+Tua9vjkJkTHokH4Sc6qnHct6Ge1","tlshash":"f9e47b56f260907819b3016a617e2716b3383a0db81484a8736decfe73899d6713fb7d","first_seen":"2026-09-19T13:35:01.590117Z","last_seen":"2026-09-19T13:39:46.46003Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6585,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":143,"receive":0,"ssl":6434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/usdt-to-btc?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.575Z","timestamp":1789825119575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/usdt-to-btc?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASjpsgSViobLmbAAbe72kgmOdxLyPQIZARFxOwhYCVstUgV6mAngupy3VbeV211Xal7TfbqTqDl%2F5Lilr%2FehWXxlXRuMuuchj7xrLQnbn25rbWSE5ho0rK%2B1BKH5FYw%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf558ab569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1065,"mime_type":"text/x-component","magic":"ASCII text","md5":"8af1a2ffb0de72d2f435628b63b48f6b","sha1":"58780189ed80c0582e82ada50857db30982019dc","sha256":"402c27003a3b1a4920b4c1570d7dd34b72a2b3b502fc209d4fa7720ee9feba56","sha512":"38259be91f8af27b9f701822c49da432a42d6484f4e0680cbec38b4725a0bbe7cc412a44e0d7238fe8082a49fbe1a90a6a19b0ac55a9ac1408c81a5ac065b18c","ssdeep":"","tlshash":"abd05e2302262db72dbf10d0443ed54b790f192b239e1df490a11e2963b2ab695836d5","first_seen":"2026-09-19T13:35:01.621769Z","last_seen":"2026-09-19T13:39:46.461073Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lanechat-cdn.com/v1/load-messages?chat_id=1000023715\u0026limit=20","fqdn":"api.lanechat-cdn.com","domain":"lanechat-cdn.com","tld":"com"},"ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.228Z","timestamp":1789825127228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lanechat-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 17:53:01 GMT","end":"Tue, 03 Nov 2026 18:51:24 GMT"},"fingerprint":{"sha1":"84:02:8A:2A:79:FA:27:E3:B1:DD:32:3C:B2:AE:50:44:C5:14:91:38","sha256":"8E:F6:4C:BC:2C:2D:D3:0B:0C:C6:8B:15:AD:71:C6:42:24:F6:99:85:B1:04:EE:D1:CD:7A:34:88:27:45:02:99"}}},"request":{"raw":"GET /v1/load-messages?chat_id=1000023715\u0026limit=20 HTTP/1.1\r\nHost: api.lanechat-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJjbGllbnRfaWQiOjEwMDAwMjMzNzYsImFwcF9pZCI6MTAwMDA4LCJhcHBfcHViIjoiYXBwXzhkOGVmNDE4NmNjMzg1N2M4ODVkZDk2YTY1YjJmYmQ2IiwidHlwZSI6InZpc2l0b3IiLCJpYXQiOjE3ODk4MjUxMjYsImV4cCI6MTc4OTkxMTUyNn0.ikcwNPBDaJHOWcZ-ZIC3X5-_KCfclf9_e5T16uer0Vc\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://coinswap.now\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Accept, Origin\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, no-cache\r\npragma: no-cache\r\nexpires: 0\r\nx-cache: MISS\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWqRyhfBYZ%2FvQ5s9QAUnDjxOWm7NX5LRNkLPYP9LnPz7ySNN%2FQNJYdFFzU%2BFMcerpOzWuTJgtub7uhRYQoyPRl1V8Kk9wJqsFyDoLtmO3SuMSCzS0WM2%2BeV6D548VmysQXFpU1dWtA%3D%3D\"}]}\r\ncf-ray: a3d8fe259de532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328,"size_decoded":1265,"mime_type":"application/json","magic":"JSON text data","md5":"edb8e6e4d0797d7ebfa604c1629ee94f","sha1":"06f87191072dc249561dc9af032454650c647958","sha256":"afcfc0528f54059a0666930d2e032192e41699a025edf430e8725105f87b1ee8","sha512":"a3b1bbb5e55607dd7c36a43a61fe8aa450799c697ee4483a5d6c610fc14e6dbd546941e876bac2146d36c3f295bd824886fd3ee374cf3d99870f8bbc145d9ee5","ssdeep":"","tlshash":"5ee086043a715c7c26559312f5543f8682ae7103e445ec35aac48f28c7f5c6a6553923","first_seen":"2026-09-19T13:39:46.462344Z","last_seen":"2026-09-19T13:39:46.462344Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/css/6d5cbee384a6db98.css","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:38.866Z","timestamp":1789825118866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/css/6d5cbee384a6db98.css HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sun, 02 Aug 2026 16:04:50 GMT\r\netag: W/\"6d69-19fc33889d6\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f18T0QkdkjdKLcfyAJQFGS6J09hQOgLbi2E1Wp31EhrqBPTlzDLHOvUXDy8WHZIWKwcgu2BJ7Gt%2FL91uiKmWUxnZgBy4e07nkdE8%2BrLMkxudiZfN9MilQ31mvXekgaE%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3d8fdf0e818569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28009,"size_decoded":5370,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (28009), with no line terminators","md5":"c0537d63e0ef7d3c2542d3cf5889cecb","sha1":"eff3e85a77158a41380815ff2c1a8cb734aa7024","sha256":"6076bc032c4dd6c8fcef303719135780961fc05e2d0c1f1fab7d4f0d9bf9320f","sha512":"2e1f0ab3a96531d5e8da3ac4f3d31dcb335b7a87d89579cd80c77220925aa4eefbf722a7783f9736b5e4cd89ad0b3d23f89c6bd6a662cabce35731ad07ccbca4","ssdeep":"384:TpSed283Zcy23qWF7O36AgzyAIfPo8PFEIN4:TpSUJCAgzyAco8PFEw4","tlshash":"c5c2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-09-09T22:43:20.887328Z","last_seen":"2026-09-19T13:39:46.464111Z","times_seen":137,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/1018.0c5c65dc4eb34763.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.366Z","timestamp":1789825119366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/1018.0c5c65dc4eb34763.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"6bfe-1a057e3d905\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3r%2B1lhRibWFs%2B1iv8Mv1uzOZajIem7RPFfoLKHq0440AlUxh3Bx%2FXJDEVnIMNybziJ76oENkbw7qT1yMlYlDZzQzsE%2BsQE69qjnQ1TUOQTBGHxlZXH2Df1hfVo1Ew%2F8%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf40871569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27646,"size_decoded":9262,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27646), with no line terminators","md5":"5ca2531916dcd00b13948ef40ca57d1b","sha1":"18f3afc623093ae3aab09a5bda76c11b5a4d76a7","sha256":"3e32aa6bee6f241ad8db6d1a144e9ca70a138314a35b272115e9119f3f37136f","sha512":"b195492d1813c9a7dcabca081749399739a1a0f10b0135dcbdff5117d29d13f1538b43ea997eed393d7d392418ff6b26d168aee20c0dbfa939d82de7a31cc4bf","ssdeep":"384:OQGtuALThn1OeOpEyFUfwNoc5ehYpTiNDFxPJGdCRtq:+4IqeOpEyFUfwNo7YANDbDW","tlshash":"8dc28784b7a5b03943925291146b141bf279fe6c948c18acf2a0e4f728b68dd94fff74","first_seen":"2026-04-27T08:22:55.148751Z","last_seen":"2026-09-19T13:39:46.465498Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/orders?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.488Z","timestamp":1789825119488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /orders?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xb%2BZaW7%2BrhUkmzPtQNbxMSkGi%2F9OxDyVOEVzhiHaYA2KsUV0lkEejtER6y5MqslHO5vEWCckgHvi2Leri9qH9JJfDJZlpokFqdGJ307Fv0mj5i1yU4J5bIObnQtKtNU%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf4c896569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":1037,"mime_type":"text/x-component","magic":"ASCII text","md5":"6aac7d12addd8ce6aae84775cff6a7ee","sha1":"435ad73eb43b18a4e964220e45380d9d2d93b333","sha256":"ab8da470343027b1d6bfaa233a15067f93deeb5209a0ea4c0fcb37a34387a7f7","sha512":"1467540ac5e4e8a7f029985991c259ff5c2ec4025584cb3f68311bf0c492aeaf5f3948c9dca55adca87d9112a23df7cd161b5e3ab000524d5eb05abf13e3fa59","ssdeep":"","tlshash":"4fc08c2543003df03cbc1188009ec94f258f020f21da18f1b0b21922a36602448032d8","first_seen":"2026-09-19T13:35:01.61832Z","last_seen":"2026-09-19T13:39:46.466726Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/usdt-to-eth?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.654Z","timestamp":1789825119654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/usdt-to-eth?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILladW2f2qSpz0RmM90lhpFTK1RH0GfOFWk00OOLxwsauEtzt09eZB6d20HDrLIAlkdgb9tzBgA6zpG2KBMj0fPP3NFFfFPJYEr%2BV0CfRh%2FUiBdxT9SEQp7wuTF8KAY%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf5d8be569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1063,"mime_type":"text/x-component","magic":"ASCII text","md5":"6dea98188f92075ee80e75b5a00fafee","sha1":"7eadcb9fc460add3f6bdd67d4201b0799976a335","sha256":"8393a04e6e55b69af26d8f3203b6ff021c510ef162d1ded5c27694e49472df48","sha512":"77428f4c62d6aacc248f10899010894e2dd14c427686e5240038374c390dabbc6d260a4af39437e17cc5211a15c15fc7e5a9cb983a3a265a957ff6dccd5dd1cd","ssdeep":"","tlshash":"e4d05e23022629b72dbf10d0443ed44b7d0f592b23ae1df490a11e6963a267796836d5","first_seen":"2026-09-19T13:35:01.713743Z","last_seen":"2026-09-19T13:39:46.467619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/usdc-to-eth?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.713Z","timestamp":1789825119713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/usdc-to-eth?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jcfVuP7QpBly80yY93ZTRaskUd1N5W%2B6%2F%2BVlx3H754cvj%2FX7inhWH7gQwW7Hi9Zgf1aqPT1r3CIu9RSmNhXfOrodjDXflZRlD11zudnh3A%2FYG505lhPqeOwjYYiaDo%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf638cc569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249,"size_decoded":1069,"mime_type":"text/x-component","magic":"ASCII text","md5":"388ad43f6884cf88a91d9bb62d4ec674","sha1":"6f3cf4d6e35b5c69bae2093d9e32845f88d82f7a","sha256":"505d867438a8c5a70dda48cfd471acaf72e4dc3b13909a6393334b40e48f076a","sha512":"9dea5a64710ca30a10d861f6ef1d8c385f01ec4f334fb2e9990ae3941b44bf7f8ae7b35a133849aacd0c4cfe0dffaea656dcd5fe3233a3e7ee7c218145af0ab8","ssdeep":"","tlshash":"5fd05e23022229b72dbf10d0443ed44b7d4f592b23ae1df490e11e6963a2a7795836d5","first_seen":"2026-09-19T13:35:01.543999Z","last_seen":"2026-09-19T13:39:46.470002Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=5dae569fcccfd25311cc08e28979cd1b\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.795Z","timestamp":1789825119795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /appkit/v1/config?projectId=5dae569fcccfd25311cc08e28979cd1b\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3d8fdf6dd8732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":527,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c3a4908ed2367c1c7aa4becb3405028","sha1":"38ae3e154b0c6327abe105b076013b1bbdfd6cc6","sha256":"b8dbbceec8a5443a9a13f936934d90172636d6481952765b2b803dbb876c208b","sha512":"2a169854233efc51af48e78395a576108b5b1dcd5a2cf741800bce6f2d55ac8f5acc922b1d3c6db9b188930bf103eebbcaa85e62f4d71071edc822275202b832","ssdeep":"","tlshash":"71f05427598c39dac546cd73d64397430fae4bb7ea05ed2cd81c9a0913deab11120d3b","first_seen":"2026-05-23T13:27:26.606318Z","last_seen":"2026-09-19T15:02:32.925938Z","times_seen":2692,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/4bd1b696-100b9d70ed4e49c1.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.070Z","timestamp":1789825119070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-100b9d70ed4e49c1.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"2a3e1-1a057e3d901\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6kcQNDk5xG5FwHv9jDycZPYK8iFk0azl08JhAUcoZzXRjuDx6p%2BILC%2FXoSniPZLVkks%2F766mqsJ4giUa%2FMe6OPfJ5gau%2BCOyo%2F8YxcaAXWQgeHIDGkTWgSS9HCKgKQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf2382d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173025,"size_decoded":55170,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a9c2166a0ae63c27a466c7fb5903d80","sha1":"51f1c90c3f1e1d32d0c81e836ded7ed5ba0601d6","sha256":"5421e13a91a9389517b66179f3b4b5eaa0d95245438066d4d7b19ac30aeb809b","sha512":"8dc6274f2637076f1b5c4cd3f61b14259ec5552d844245c8b93a64f19c8b6b7347554a03b994b0f880b7dae74ad65e54eaa00be81783c2cedbae82a7fd4b89dd","ssdeep":"1536:DWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:Z9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"ecf3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-08-21T15:49:50.637902Z","last_seen":"2026-09-19T16:13:44.950468Z","times_seen":16307,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/32440/small/pol.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.116Z","timestamp":1789825119116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/32440/small/pol.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1410\r\nx-amz-id-2: x4E1N72HmNRSn+rnSioC8q12PWFu3EGuuDDLBTUMAb74uSQhZ569QhfXl6jYUnIcvRlk/Kr7rvKTj/lIdQ1jT66PfAS9MSyj\r\nx-amz-request-id: 2ZYCTWSBTCEB96SK\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 29 Sep 2025 02:49:44 GMT\r\netag: \"c5527bcec3e32ad90b60cc8a03f37a92\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .Mo2ZSNulLSqUzjG1QVOwB1IhjfPcrJT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1931\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-content-type-options: nosniff\r\nvary: accept, accept-encoding\r\nage: 684659\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf299872efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1410,"size_decoded":2368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"afe8eaf7152d1203b3316cfc747f0bbf","sha1":"30545a7489de6809c30d1b25c61fee01dee3c0ad","sha256":"7e185f61ec375279da6fd95a7e518d0b1736811e909c49af69b0bb91979257e3","sha512":"b350a010abfa78ae8fdc0c4a008f093d4b53f966a6ada2e3f84ae85de517f6d8b3cf2b678e031c6fb08d4f02f94e5f1e9a0923360681b41d051195d474bc205e","ssdeep":"","tlshash":"5821e9488ef6a4a5bfd27c5904f523d8ad1023000c1bca7a4342330de45cbe2ba1ba0b","first_seen":"2026-09-19T13:35:01.563338Z","last_seen":"2026-09-19T13:39:46.474462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/api/assets","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.456Z","timestamp":1789825119456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /api/assets HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DY2swRmEDQ0rXc8ED6lK0Ujgcpc34c2wuCIXGBC6UzqphNcSH9h3Htce0ONaj%2Fbyzfk7G%2B8kxCEpLzrfJAnfaoV2DC87emzf3ueZSX4kHe7ing10pYuBCd1tRPu2Lyg%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3d8fdf49889569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392481,"size_decoded":60706,"mime_type":"application/json","magic":"JSON text data","md5":"dd270e5959ac0f507e3db0c5555eafd8","sha1":"0975d1364fe35b0499e80aa7a933ebf93f3aad38","sha256":"8de6b8f9af8fdfe26337cb3375e45417a9fc97cb96bb9c176ffde7efea0a2f89","sha512":"3725e65ee330a78b2e4649e0b6d0f645a7c65fb0f41455519828c23f370da8599b23821429319e193afba943fe8ce35d06e6383b92a77f6d18e7091be3bb4d69","ssdeep":"1536:4XItxGrrWhsgxPtD+E7lHUQTqN8a4r7BTkCUEs6lgc2bBySva+csC9vThs09OXqH:XNr8ZuhYK63RHua4IO","tlshash":"e184ad9b36785cbf471844c800d67f1c72860222cd9a49fec929bfec96f4fe5612e694","first_seen":"2026-09-19T13:35:01.579166Z","last_seen":"2026-09-19T13:39:46.475196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/main-app-6d5d720c85676648.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.073Z","timestamp":1789825119073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/main-app-6d5d720c85676648.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sun, 02 Aug 2026 16:04:50 GMT\r\netag: W/\"23c-19fc33889c2\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\nage: 288\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYlP3f2HLjDX%2BOyoM8NC4QZBilR59f0sImas8DSR%2B1v2pWHDrX9%2FUi7LGzfHgd5pGDzxoy2h3sPD3T8iHri%2FyPYFw9preqsV8XC81T5iix3iEEsnq%2FGYmfA9hexIrOA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d8fdf2382f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1031,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (572), with no line terminators","md5":"f325257fd9b8fa22cfcaf8169d086677","sha1":"91c40269dbe29c5407c93875a1db4e0626bb0d59","sha256":"245030b639bdb303f6ca6d86260118fe205eeb058b29755b59175c503cd40977","sha512":"3bb638c1d698a76e63db7bbad4a1696035df75064f378d627b22f08d2c92eaf7827f1c200468eca019629c1ca69b3be42ca6265ccf39f798588520b4b13f9a2a","ssdeep":"","tlshash":"38f0d65a4f0cf52f5c26ad74fe97ace2245f4175202b4e616901eea13c23bacd270404","first_seen":"2026-09-19T13:35:01.702126Z","last_seen":"2026-09-19T13:39:46.475904Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/2834-a3d715add6adde09.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.085Z","timestamp":1789825119085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/2834-a3d715add6adde09.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"3f47-1a057e3d905\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z50ggQ0DMKVdMeMvrxtKMsQK23LOWpN0%2Fpuk5bI1RbtOfLA8BYgAdvdJeJWGwaWEeVhvqvTTOi5z1NeFYEmU%2F2vhz8aqZnyrmOSM64ktq6jWaE%2By%2Fi1j8Om9wsz5Tr4%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf2483a569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16199,"size_decoded":6777,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16199), with no line terminators","md5":"751356694899591b71cfaa113c89c66f","sha1":"9a319b65fd7fbed964d54c2fdc0ce7a82b7bb471","sha256":"90b09a57c2fb09344e4a196def7acbeab26784b79fd4c470206fe6e97b1a5abb","sha512":"64c4f4363a2b87aacbe7e2fd6c4f211da8f97a98c4d19ad9d172a59b01aaeadb36104056ff715ac9aa5004169d8ddd2a6179ef847d44733facb37c2b2a9ac63c","ssdeep":"384:7aLFoZrBxz2Je9C90heXz/aXx9aFpJ4287ZwI1EmYa6o4Rv72wA:7aO8/1D/aXxIpC2pNZA","tlshash":"d772b7aa736455b793de478b18ea0405e3f4a8943459482cbf8c7ac3b929ce950fdf31","first_seen":"2025-12-21T11:58:15.786493Z","last_seen":"2026-09-19T13:39:46.476734Z","times_seen":10,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/3447-39fc61932db36c6c.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.086Z","timestamp":1789825119086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/3447-39fc61932db36c6c.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sun, 02 Aug 2026 16:04:50 GMT\r\netag: W/\"7dd8-19fc33889d6\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bztamNc5TuKf%2BDV4cKau8jxx7SCo4uB%2BjEhQqwPPUE3SLEY0WaLwGWqF5N6VgfI%2FalnIIgO%2FTxCy1AU0wnGWhtd2dmaTQXn6su7AjoL%2BChlQjdVJo0oVcmqm6%2FyIH4%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf2483b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32216,"size_decoded":13588,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32216), with no line terminators","md5":"fc327e68bfd0224b4a2ae57427773d88","sha1":"b58d5701bd30c64257ab19fe5d92ccef2e7ca999","sha256":"644612644b88b79197a978ebf07523e488b43470f5e73a30efc6ed08384d56af","sha512":"b9a799ba0fcda3a83de466e73e9687036b59bee64ecdb177d6695f5e0e89f2d5711352a479105d29d518d56b99fc6c3a7b3e21ca4cf1290b7e4748567a027d98","ssdeep":"768:092tGLTXdZEuEQuIthtIPbgi71OGmeREB8:w2tG1ZEuEp4XI8eTmeRv","tlshash":"59e2f9e432b2f1d612d328e240ef8487a236ad44695d21b9f60c99f93cb1589633ff75","first_seen":"2026-06-13T10:41:54.376992Z","last_seen":"2026-09-19T13:39:46.477295Z","times_seen":3,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/69/small/monero_logo.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.113Z","timestamp":1789825119113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/69/small/monero_logo.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 906\r\nx-amz-id-2: kVgRKXf0HcBiROQ1Jsu828DOxhxmX85BM5cxha+IVMbzCbBEaNZH/qefRC0NuzODOeOpBtFllkk=\r\nx-amz-request-id: 37D62Q06V26M1T74\r\nlast-modified: Thu, 08 Nov 2018 02:20:59 GMT\r\netag: \"659e8197e27656370d9a92cd43c60491\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=1795\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 654436\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf2999a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":1740,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"433ed3727f6d81449cc88ded6cca0e30","sha1":"84ad98a23f1f08a87333bf77a462699e3a9e951d","sha256":"8ed3d44e3a19722c8ad9cab1bae335fc5a6bf1a696a7eb54084517c5d29eaa01","sha512":"6383913c6bdac4f9826ea9803c301f0f446385c8654797a1f99f4dafa867e1a0b7c0fda71c202f9861c3e564e5d84343f766cfb7de4115ad184e32f355a3b0f1","ssdeep":"","tlshash":"c711b73c27a7790748b5fd35b03497518b344dc1a896088473e3eb255613c1ca7122fe","first_seen":"2025-12-28T19:01:59.318677Z","last_seen":"2026-09-19T13:39:46.47825Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.094Z","timestamp":1789825119094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Wed, 23 Sep 2026 13:38:39 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-19T13:39:46.479097Z","times_seen":1280,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":5,"connect":25,"send":0,"wait":50,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/6295.c5322959308a02e0.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.457Z","timestamp":1789825119457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/6295.c5322959308a02e0.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"7be-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiBfdgU%2FZ1JbK5FvUHRpFPJe0Dd1vDOAH33NWXnf7LfKykStGZv%2BDT7YXpNuVP6BKln%2BlIxTwx96lUuDdtCaIEWK5kEu4LpNdlOfRnIgmI9ulO%2BAgkzslHQfDXr%2BvNw%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf49888569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1982,"size_decoded":1587,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1982), with no line terminators","md5":"2a3472586cb3a8a1716c1f9448e47a74","sha1":"5f5f34d3d67375d5cc4f5ea8130fa6af75933e3e","sha256":"0a9add1f2514b239fb8a15bb97cbe76b034aa7d716101f3083fd4e6ba491ee86","sha512":"41d71842643ef27a1bd041e441443f41251e1d051695845eecb2407a3143d302545c689458a6e7920004c54910a516ac064e241c9f8a28de18e0820633ccf6fe","ssdeep":"","tlshash":"62417baf30b03cd9d43bc5639829301d61b22d3bfe2d9a569bab62647e75c5420e4633","first_seen":"2025-09-10T05:14:21.952672Z","last_seen":"2026-09-19T13:39:46.479706Z","times_seen":17,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/4071.7d8b1e4801b59c81.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.633Z","timestamp":1789825119633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/4071.7d8b1e4801b59c81.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"7cda2-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BM5aQD2ybc5HmEVXppgCE8F9QL%2BaJSjMjUkZ5ktvuSEhpg7kVvKFxxyLyh%2FvPEkecebfEErgT7omKtdtyN2HYgpkCmk35evzuSeqN%2FgE63kddtei%2BJA786tQWCjR0Ao%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf5b8b5569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511394,"size_decoded":142059,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33674)","md5":"0fec45608e2071332287da8a2bfa6645","sha1":"734d059635e88193f642e9d16cc1e45386223919","sha256":"921addc43e4762e644923fc79e0384a3bd3a5736cf7aab1e24d21971000b5a9f","sha512":"e6a3ee397ea029d87f7d328d1c537a9d894c6f0b23baca7173c4d0daca82910eabff0c875f861c6a75060e6696e1402a780ffa3cfd55f6ae118360ffeaf1518f","ssdeep":"6144:OFe4ziVSIthSfHZ0Z1LU/yz6kWKUQEJS1eLvLGCw/xx2tcx4+Tbyx+EgOf7hI0jL:qe4qSfHZ0ZJEyTya0ANvSd3EkiRjg","tlshash":"c9b45c517376f436039b819ea8a92201f2345898541a803dfbfcacdbef8498955bff71","first_seen":"2026-09-19T13:35:01.687554Z","last_seen":"2026-09-19T13:39:46.480372Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/usdt-to-usdc?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.812Z","timestamp":1789825119812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/usdt-to-usdc?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YacQh4EMFeH55hODMJlHhqZKrSvAVgKsOxEN8dr%2FD9JiIY8M%2BFroXeD%2Fdx24giHlWSA5Z6g1kDuznpJcv2jJG26%2B1Q1kw9m0yMCCB2osf5GDwqFz%2B7R07K3MrWVwYrg%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf6d8dc569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":1070,"mime_type":"text/x-component","magic":"ASCII text","md5":"f0a7dd18181e749bb605b932dde0908a","sha1":"f886d84fd1373024851196b9a9f7d0fc477e8e94","sha256":"fdcd3d44c728804c8a8e2a104243eaaff4b5a66145355f40078ef5ec68d9ba62","sha512":"2ba668a5075d68cbab8d7c52dd441f49d0d0a185f1a69756f7c6ab93573714e0e035ffb4778aed696530a432e2393d971eae9e3eb72c99b381151e53ccfbae06","ssdeep":"","tlshash":"63d05e23022629b72dbf50d0843ed44b790f292b239e1df490e22e2963a267696836d5","first_seen":"2026-09-19T13:35:01.663009Z","last_seen":"2026-09-19T13:39:46.48113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.lanechat-cdn.com/ws?appId=app_8d8ef4186cc3857c885dd96a65b2fbd6\u0026token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJjbGllbnRfaWQiOjEwMDAwMjMzNzYsImFwcF9pZCI6MTAwMDA4LCJhcHBfcHViIjoiYXBwXzhkOGVmNDE4NmNjMzg1N2M4ODVkZDk2YTY1YjJmYmQ2IiwidHlwZSI6InZpc2l0b3IiLCJpYXQiOjE3ODk4MjUxMjYsImV4cCI6MTc4OTkxMTUyNn0.ikcwNPBDaJHOWcZ-ZIC3X5-_KCfclf9_e5T16uer0Vc","fqdn":"api.lanechat-cdn.com","domain":"lanechat-cdn.com","tld":"com"},"ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.239Z","timestamp":1789825127239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lanechat-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 17:53:01 GMT","end":"Tue, 03 Nov 2026 18:51:24 GMT"},"fingerprint":{"sha1":"84:02:8A:2A:79:FA:27:E3:B1:DD:32:3C:B2:AE:50:44:C5:14:91:38","sha256":"8E:F6:4C:BC:2C:2D:D3:0B:0C:C6:8B:15:AD:71:C6:42:24:F6:99:85:B1:04:EE:D1:CD:7A:34:88:27:45:02:99"}}},"request":{"raw":"GET /ws?appId=app_8d8ef4186cc3857c885dd96a65b2fbd6\u0026token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJjbGllbnRfaWQiOjEwMDAwMjMzNzYsImFwcF9pZCI6MTAwMDA4LCJhcHBfcHViIjoiYXBwXzhkOGVmNDE4NmNjMzg1N2M4ODVkZDk2YTY1YjJmYmQ2IiwidHlwZSI6InZpc2l0b3IiLCJpYXQiOjE3ODk4MjUxMjYsImV4cCI6MTc4OTkxMTUyNn0.ikcwNPBDaJHOWcZ-ZIC3X5-_KCfclf9_e5T16uer0Vc HTTP/1.1\r\nHost: api.lanechat-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinswap.now\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: HPz1iOHzPnR1yjjNEjjd9g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 19 Sep 2026 13:38:47 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: VdAsxI3ixC8Cgt2eDsa0WDqUlk4=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPR0dsJKhGRyA3JyM9kMXS31%2FzILLMn%2B4w7MwtYAc6z96Ja9yTv6QmDIbN5D8SXJLffEfZfKprMS2TahRjCYN9ejaL%2Bn01KQupOhSoeP1ZOA9MUnTxUT6Ao0SALS8oYDzQjsnZX9jQ%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3d8fe258d9cb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":632,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":27,"connect":29,"send":0,"wait":159,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5604-e4236010bc4f753e.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.077Z","timestamp":1789825119077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/5604-e4236010bc4f753e.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"c480-1a057e3d905\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaBImWyqmndrxrI%2Bm6aJLceE4BbCs5uwtP3k%2FyPWy1iatcxLe7e5TAa3sFSv8Vc93T2W%2BQyjUjLaJVCHL%2BG7gKaATruo4cMEqSBnegjDqB82SiUNHxpktMgsdllCG08%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf23833569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50304,"size_decoded":15850,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50298), with no line terminators","md5":"1f8cea9f0cbbaefeb61c052ab87a5193","sha1":"e060be63856eed4d61c8579efc66995a22082e22","sha256":"ac097064c7e07759e06b2b5220559a27ca1b930a91a40a20520c00a2c8325135","sha512":"10024d7da7b813e804d5a17ec32d5ae80643b5111db23ff290d925bf7d6436f9eeb42764b358365f82618746486f1ace5a6ccf17c851174f6faa479c45e4794c","ssdeep":"1536:QcvYxEN3NpnQ2oY8pG2gwTN2nwSreTDL3v9aCS6+Y/p5Y99xzY:5N3NpnQ2oY8pG2gwTN2nwSreTH3v06Jl","tlshash":"3c33f8a0f141b1622a4303d5802e0309af7e78b4574da46bb3ad9ed71d61cca4a7ffb1","first_seen":"2026-09-19T13:35:01.547004Z","last_seen":"2026-09-19T13:39:46.482217Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/app/(public)/page-5f53d9d1daf8cd31.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.093Z","timestamp":1789825119093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/app/(public)/page-5f53d9d1daf8cd31.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 10 Sep 2026 09:50:28 GMT\r\netag: W/\"ad-1a08ab9cec9\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\nage: 288\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIXEo7SlY7bBSz2AO2jCEq0%2BvuFejGRbxkYK8iWUMgsgc573%2Bvq4V9g%2BR4K9xY%2BHaoCiXjztUndSDSzi82k2kea9lO2ToeuclKdXKeDAOX3MptPt3VJH2yrH0NK2vis%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d8fdf2583f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173,"size_decoded":942,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b47f888f4ad8967931c5c240a379e444","sha1":"d6ea4b0d51098ccc97a7cd2d1c77cbec90facca0","sha256":"287ef746471bc54ed36b9493dd3b326409564484b91687b4c4a04d914f6a1b94","sha512":"4d41d727e4a97c00ca6f637d5cfc1222a8bc76535024dc85c8efbada3c62dc4a864f9376826b7bbb648882a8115dc98bdc481815e8093fa2721e2571dc8284e2","ssdeep":"","tlshash":"33c0c09340833444b8fb091908f034b070cc105b386ae0b241220c5034f65cc4270f00","first_seen":"2026-09-19T13:35:01.633968Z","last_seen":"2026-09-19T13:39:46.483881Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5294.f3aecac26cf633f4.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.454Z","timestamp":1789825119454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/5294.f3aecac26cf633f4.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"904-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEyZo8DnfaIZau5cCybXflHhtn8zpR%2FupDfq75FvczcRLi4b9Nvj6%2F4X8Y0Gwt8E8TxcX3SkBNFewCLcCVWfMYjtSzjmByZ647bBK0arptlhvp2ix%2FphtbbOmMY6tyc%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf49886569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2308,"size_decoded":1768,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2308), with no line terminators","md5":"73b395cc45368f89911a9d66db024e4d","sha1":"3b7ac4d36cd69cce3864113085bf5f253347d0a4","sha256":"d248227354b0e8f866d1411b862e15454c80dc3cc3d85df470f7b483501d9ea5","sha512":"524209051e9046b6060119d879354b86bbb253a62c203819a8496689f3e1f4dc2e24e0c7cb22d5a5ffc5e161722784e86b9183b8acf488a839246e1c7373a0e6","ssdeep":"","tlshash":"364132be29322d4e78738c57df891a4d7122ef7bce14a866ce691218cd6371971a0a31","first_seen":"2026-05-23T13:18:14.688945Z","last_seen":"2026-09-19T13:39:46.485056Z","times_seen":10,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/7195.15b3afcee2020a76.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.632Z","timestamp":1789825119632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/7195.15b3afcee2020a76.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"494bb-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDPnJR3M0b9xYqAlX6AUHcvNjieLRUynKrQHiv0lwh1w6ClswgcVXVJnin8%2BUTeSlB%2FiCezhoD62ixpVYfWJONIT8YH%2FcLxrSbkAIxItxPawrTRfmMxraJcLQ3CecPM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf5b8b4569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300219,"size_decoded":117019,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (47488)","md5":"ea56cbd62ed2a2b7758cf3fb5e2eee6b","sha1":"374564d8428306b5b113495c58bb02a7f83fa146","sha256":"4ab693087b7f5205600c8b1d0712ff3c4873ee5d1e4005a17bf6a7946a98f678","sha512":"939ee01f60467636f174256eb2c55fa0e322e8f86679eab2b071b7cd719825a340230455385b22d774477c7a468fcfc4e94723463acf20f180b76a9db98693be","ssdeep":"6144:fZLcoSfupzIkF7RNoek9eFadmtbPA7/qBXh7/sSmIqk8ru5:Rh2eAxIaY","tlshash":"3b548e94b351b078cfe720aaa4273205f2316d4594cd8859f7e4eaa72dec8c85397f39","first_seen":"2026-09-19T13:35:01.685195Z","last_seen":"2026-09-19T13:39:46.486056Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.708Z","timestamp":1789825119708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/logo.png\u003e; rel=preload; as=\"image\", \u003c/_next/static/css/6d5cbee384a6db98.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/css/b28e53eb9759515d.css\u003e; rel=preload; as=\"style\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2zlyQPKmi%2FY1RwtCEJcYUFlyYc4%2F%2BTESKgv8GiRIaqXb0gaczkXASkPTC%2FbGPP4hl632pg4V0U1NMHGL0funWeQRFVTC0lSJRWWRYgYr1ILE7NTrKAkaI%2Fpac%2BEbKc%3D\"}]}\r\ncf-ray: a3d8fdf638ca569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":1111,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/xmr-to-btc?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.818Z","timestamp":1789825119818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/xmr-to-btc?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOua%2BvzpeNo02OFvVcDYs%2FK2TfYgadsFcbC8pG5hoAG2EF89velNXPEVJMeShXpNoLzqpfhWkb8AEGGD9r4aO2tgQ7ixrAUUPW7jzEyhoWxNee86OpLnDtuoED8YmgE%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf6e8e0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248,"size_decoded":1063,"mime_type":"text/x-component","magic":"ASCII text","md5":"953e1a7f9b9e477222a8383a6a01768d","sha1":"e177923f0dd07e98f6fa43dfc0904175c282213e","sha256":"e9cc6051942c684f43552017f28d7022344746f6a85fbfcb10496250b9eb5dfe","sha512":"0a4f84d00f08790663d0d53c736924059727c27bb7bf6d0367bbc5989d10b8f33e5bd521034cde6ee69f48dac0abf6e39ce13c5d1310dda5bb6f79c49940a21f","ssdeep":"","tlshash":"cfd05e3302122db72dbf10d0443ed54b390f192b229e1df490b11e2963b2ab79583ad5","first_seen":"2026-09-19T13:35:01.570789Z","last_seen":"2026-09-19T13:39:46.486744Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/100.41a00bce.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:46.169Z","timestamp":1789825126169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lane.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:06:50 GMT","end":"Tue, 08 Dec 2026 21:05:20 GMT"},"fingerprint":{"sha1":"98:88:A3:D2:35:EC:94:87:06:23:4B:11:C0:0A:1A:1F:9B:CF:B4:9C","sha256":"62:D6:D0:BD:0B:E6:ED:F1:18:87:D3:9F:B8:1D:47:29:ED:C9:31:A0:D5:99:CC:96:D8:9E:F6:82:28:DC:71:01"}}},"request":{"raw":"GET /js/100.41a00bce.chunk.js HTTP/1.1\r\nHost: cdn.lane.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:46 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Apr 2026 16:33:12 GMT\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"69e10f48-b0\"\r\nage: 202671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=quGgdsdH5cLxK1swPwN0LUWTEw479IkRsIyAnwhsDL%2FrXyHNTNSo2rBGbg%2BhKsz7vT5GixP5JEap46EUuvTbuMtm6XVQLySMM8PPxGrmWVDHe7pvZlfE4cWRExIL%2Fe1d\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d8fe1e9a300b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":843,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"8f67f467ba0c7bcbdd9cc8e558f9b8c9","sha1":"eecdf27afbbb62ca68dc78b2f598b08d4cdd40aa","sha256":"16b6bcf10bce57d2acc46e742f41cecb8f5e3ab285027fc2bbcfe49efc36622d","sha512":"282702ca2da550f8403735188bf54209979c0df940e2865ca67e81a0a2650d69a8e563490034e83ffd882dcc13a7863238f42c8677183db2aef13e759beb7096","ssdeep":"","tlshash":"2ec0123d1150fe9c3d5f16d50c598f5774d43165957dc5513c5b885d4115538c2dc858","first_seen":"2026-09-19T13:35:01.538679Z","last_seen":"2026-09-19T13:39:46.487489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/7880.26a690b6.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:46.238Z","timestamp":1789825126238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lane.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:06:50 GMT","end":"Tue, 08 Dec 2026 21:05:20 GMT"},"fingerprint":{"sha1":"98:88:A3:D2:35:EC:94:87:06:23:4B:11:C0:0A:1A:1F:9B:CF:B4:9C","sha256":"62:D6:D0:BD:0B:E6:ED:F1:18:87:D3:9F:B8:1D:47:29:ED:C9:31:A0:D5:99:CC:96:D8:9E:F6:82:28:DC:71:01"}}},"request":{"raw":"GET /js/7880.26a690b6.chunk.js HTTP/1.1\r\nHost: cdn.lane.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Aug 2026 01:12:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a713c97-957d\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 202671\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7q6vZGQwX77b%2FJeO%2BqUtzKgdoOfThQocWOA3jDlbM0PMLoFdAH%2F4AGXN5VWN3xxxIrduJghEJhAyBYVyU%2B2EtZb%2BHr%2BIDWDdam8bpko0wYD%2BR2GchW251FCymjMyVlL%2F\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fe1f0a540b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38269,"size_decoded":16713,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38262), with no line terminators","md5":"b2d6de97c55c65048ad8cb957b1d5ebb","sha1":"b30567854be54ac12b4b7d7e89da415e48b99761","sha256":"3dac4a73f4869c5deb527289728b07ac0c6530765fc5dd0f002e6e6ea4d2d22c","sha512":"6d8044a8e9a7a542c7eb1554056e9936af749e06f72d9631e563a6f3deb661117718d4fe7e0f3d4ad5e315add03e740b384ccf1d7db4d93afdf87c004bdd1a12","ssdeep":"384:WCxcbnUrkg6EF3R3apDejUQLIhw9i6c5+pCqNFaiE8E0QIQfJCQGtVU+Bf2X+pt6:WVbOdapsgc9NwlJCx8+LEj","tlshash":"9903e5c8b2d3b05d627378b5447f6006b23e7d94641d8842c523e5d97ca9e2e913bfac","first_seen":"2026-09-19T13:35:01.659163Z","last_seen":"2026-09-19T13:39:46.488949Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/e?projectId=5dae569fcccfd25311cc08e28979cd1b\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.791Z","timestamp":1789825119791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 22:29:58 GMT","end":"Wed, 04 Nov 2026 23:29:15 GMT"},"fingerprint":{"sha1":"DC:2C:A2:F6:6F:BD:FF:1F:63:4D:26:F9:76:6F:09:F8:A4:BB:94:A9","sha256":"3A:2B:3B:46:D8:5D:7E:5E:B8:AC:B3:5F:20:89:81:38:30:56:39:FC:3D:A7:AC:22:F0:0E:3D:9F:E4:9E:CD:06"}}},"request":{"raw":"POST /e?projectId=5dae569fcccfd25311cc08e28979cd1b\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 694\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":694,"data":"{\"eventId\":\"dc038c64-fa26-47d7-b4a9-f7734026dfb3\",\"url\":\"https://coinswap.now/\",\"domain\":\"coinswap.now\",\"timestamp\":1789825119788,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"projectId\":\"5dae569fcccfd25311cc08e28979cd1b\",\"networks\":[\"1\",\"56\",\"137\",\"42161\",\"10\",\"8453\",\"43114\"],\"metadata\":{\"name\":\"CoinSwap.now\",\"description\":\"CoinSwap.now\",\"url\":\"https://coinswap.now\",\"icons\":[]},\"showWallets\":true,\"featuredWalletIds\":[],\"excludeWalletIds\":[],\"enableEIP6963\":false,\"enableInjected\":false,\"enableCoinbase\":true,\"enableWalletConnect\":true,\"features\":{\"email\":false,\"socials\":false},\"manualWCControl\":true,\"basic\":true,\"sdkVersion\":\"html-core-1.7.8\",\"siweConfig\":{\"options\":{}}}}}"}},"response":{"raw":"HTTP/3 202 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3d8fdf6d878120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1557,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":6,"connect":14,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lane.chat/js/7038.0528908f.chunk.js","fqdn":"cdn.lane.chat","domain":"lane.chat","tld":"chat"},"ip":{"addr":"172.67.185.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:47.225Z","timestamp":1789825127225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lane.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:06:50 GMT","end":"Tue, 08 Dec 2026 21:05:20 GMT"},"fingerprint":{"sha1":"98:88:A3:D2:35:EC:94:87:06:23:4B:11:C0:0A:1A:1F:9B:CF:B4:9C","sha256":"62:D6:D0:BD:0B:E6:ED:F1:18:87:D3:9F:B8:1D:47:29:ED:C9:31:A0:D5:99:CC:96:D8:9E:F6:82:28:DC:71:01"}}},"request":{"raw":"GET /js/7038.0528908f.chunk.js HTTP/1.1\r\nHost: cdn.lane.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Aug 2026 13:04:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a772959-df4\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 202670\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjjpU6%2BP3ZG6hzroFP%2Fm%2F2q7drI8B3WxLk5X1o6fKjfhMFCh7sgMJMRv9c0LU9JqXojoJxr4iijIvLkQmJK3RCzSqu0mFiuSFwvN9KIwVt9o3AmrFuQ%2BKhJPM%2FHu12RO\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fe252adf0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3572,"size_decoded":2298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3572), with no line terminators","md5":"b4ab40dc747cfce2e031b48082cc8599","sha1":"4a40558c7f9d0774f82d811cfde734dbd963aab4","sha256":"55289ffe14493000d8de18a916e172dd4f32182c9496fc98603a9a363911b50a","sha512":"f9afc45119b06cdcb498e1789a3913c3660d193fc348dafa6dd336a774377bc1d048aabd946ff7ff7f08634c4093c03fee47ffd461ff01d3ed3d3798f9ae0592","ssdeep":"","tlshash":"9c71ea133660449cd19a421b12ad132cf9d8291d693e865832fc8c3d72bbbf0717db5e","first_seen":"2026-09-19T13:35:01.595741Z","last_seen":"2026-09-19T13:39:46.489923Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/6319/small/USDC.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.112Z","timestamp":1789825119112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/6319/small/USDC.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2030\r\nx-amz-id-2: 1QDtsw5VF4ge8lC1QGkE/keNd/UXMZoTCgyMWTz+ThGG5CI2+rTz2pkQH2NtsBPu6huIgMBbbWo=\r\nx-amz-request-id: WKMNZH76MTYSXMSP\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 28 Jan 2026 15:53:26 GMT\r\netag: \"b2ca3e61e62934ad3a38984945a40573\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: f66HnXlXdzNOpaD6ZRgWYQQLeqBXOTbi\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\ncf-polished: ok, orig_size=4060\r\ncf-bgj: imgq:100,h2pri\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i\r\nage: 431743\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf299932efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2030,"size_decoded":2968,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2017a8829a789f6c9c5f8da92cd582dd","sha1":"bb7757a2fdb00d59708fbee40bb5df956d9c9a15","sha256":"493ff73f5471ad866165efc8a1c040ac270cd909e9efeedf9dec562c3a9bbbda","sha512":"d8d27b5cbba2a6e96c6f7e0aabf7b1835c7bce810201828c77c31faa91421d144e4d5be939ca21318360c344e315e8580d22af12d57f8c774321a7baa1d962d2","ssdeep":"","tlshash":"94412cd177b415ed4f8b18dbc7ab84935353b59217fd88eb061204a36c159622d31900","first_seen":"2026-09-19T13:35:01.588967Z","last_seen":"2026-09-19T13:39:46.491743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/825/small/bnb-icon2_2x.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.115Z","timestamp":1789825119115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1746\r\nx-amz-id-2: 3ZalYzKQ4RtQ6A/I8dhK2bA2zx7+2VINnI1S0ATKHAVnItP76yG/nhx32K0CLG8+aQUO6kayOxTrw3lPFQXUZunYDKmeKe0P\r\nx-amz-request-id: CCPWTVY2709W7TYY\r\nlast-modified: Wed, 16 Feb 2022 02:50:52 GMT\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-version-id: v33bpgYG6.VLwv9VTOSZhRGSlcErU9GS\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\ncf-polished: ok, orig_size=3237\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 794648\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf2998a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1746,"size_decoded":2629,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13190e0172162efbc92046d2b3b70127","sha1":"c84f2e5c71aefe20d8db2c18ba060506b8e1e13d","sha256":"74e54f284baf48aae2a5d7d6cd87131c1c3fd2294f4f2c2cc646716e4210a57a","sha512":"b1b7372a973ca60b231d34b204858087ecd912951d9f9accdef337b7ea7ea0943cb1098283eb324f815bc9dd40ad75edde82fc6e9f60303c4e1dca56f87c41cd","ssdeep":"","tlshash":"c1310ddde292ae4d1417c10d13ee045a9c546fc5d425bb7a4d8238db53e40e582ef4d9","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-09-19T13:39:46.493303Z","times_seen":86,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/1386.8710ea3172239880.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.453Z","timestamp":1789825119453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/1386.8710ea3172239880.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"3ef-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\nage: 288\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QRnH4eusczmj3DOm8iFDN%2Bx99GpvHqCothKYphEvHMBoN%2FjQ25n%2BpqcP0FeN9L8UsiZ19xLZlUn359j42JtwlVa7USDmOh6QuDRi1G1C0RVUSNkIrv%2F%2F%2F7kAYp62aQ%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d8fdf49884569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1007,"size_decoded":1285,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1007), with no line terminators","md5":"2a590031651ccc9662d66bc42ac572ad","sha1":"c616a2b6005871ffd7b4d0dc627ca608769b198e","sha256":"98dfcbfd8d301db08c7e9df86d16b4893b3bad5af5b0f90691c2b25085dae307","sha512":"1021ba1e0506578095c1cf77d7e98a92478356e039e66e3335ba7dace93e8e6cf8ab8e5376dbee3d149ab3b9a990a22c2a80126dbd871ef9b1a4a30aefcf2504","ssdeep":"","tlshash":"c21159bd913468c9b822d5635a396789f223a9a7bcb144d2e896b703ce1490c664dfb0","first_seen":"2026-05-23T13:18:14.644234Z","last_seen":"2026-09-19T13:39:46.495007Z","times_seen":10,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/btc-to-usdt?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.574Z","timestamp":1789825119574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/btc-to-usdt?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKYzyjuntu4B43jOXvghOGHa1%2FQzpXrjWck5FhRY14HHKahU12n3pNXx3m3wsYcaj3GfTz9IEAAMdyabclulyJTXAK4wxwxA5U1FgYPHa6ScUeEsYPbeunrHm2VktM0%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf558aa569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1061,"mime_type":"text/x-component","magic":"ASCII text","md5":"a1e72f5a64d473cb67a5c326be7a513b","sha1":"f047061824d1783ec2120891aa46d63f4e96a178","sha256":"32e736b2135cceb0f4dc05e2098f2102cb71e023206bf6b170b654e85f9c7b3c","sha512":"43ba1b9af6075b9a8709eb225d632c263465095b709c5dcd0e2fb51d61b05baf64d38a95bcb095b7fdc01bec6442dc1021a6890c034a5d14e96e14fbc12fb27e","ssdeep":"","tlshash":"12d05e27421629b72dbf10d0843ed44b390f192b229e1df490a22e2963a267a95836d5","first_seen":"2026-09-19T13:35:01.680297Z","last_seen":"2026-09-19T13:39:46.495984Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/css/b28e53eb9759515d.css","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:38.868Z","timestamp":1789825118868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/css/b28e53eb9759515d.css HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"8f58-1a057e3d901\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ilE6aBLtODUmfZU4o%2BVAUumfuvX%2Fmqh6ow1r8n1w3ghfpGSnhXOYoKNp1kPbTUri52acE3OqiQguPVm8rAokBqoKgdXyVEiqv8LgpyUpPO33EK6GyvHfMhsdGIDju8k%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3d8fdf0e819569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36696,"size_decoded":9048,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (34403)","md5":"ff31aaf72ee68bfa6f1e9faf8405d558","sha1":"73a29462ca9e8f3d7339a2a25860af28f661b9dc","sha256":"16e832829e874b2c8e211b837ba2d3eedf7c87fddc8291b9679f51ee1c49d967","sha512":"ad186cfaa67d74955d6f9409415db2362e2e194d20ee8f017b43ad2b423d817438bb71e339a0ab0bef731de08a1937805c6adc50dbae1ad3b02e4b1552531aba","ssdeep":"384:GnLLOi8wKnurd9Q7FDPFUycXbucYEHJrB8mn5/6:GniwKnurd9Tu6Jrd5/6","tlshash":"3df2d65eaf21523e6c3b85f5c1e8ba9d712ab481de3606ebfa4341025ec73f60973514","first_seen":"2026-09-19T13:35:01.559355Z","last_seen":"2026-09-19T13:39:46.497082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/4e88bc13-ab3f72ca0d0cf2da.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.082Z","timestamp":1789825119082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/4e88bc13-ab3f72ca0d0cf2da.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"238b7-1a057e3d901\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hiGFbVcGDU9IP9he4%2FquPz%2Bvmecjvc0xH%2BfhXvn0WPdkA%2Fu5oNrOVMl2yR9GtOxX20KgkiepTm%2BVJ%2FOVXQWgugqh9YQio1EaqftBdw4vL2eJof8dUY7w5LIyqBgIP%2FU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf24837569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145591,"size_decoded":37548,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"b4404a48c6a445459f6c4018188fa9f9","sha1":"44d7c836220492af651a4baa675a17c92a97c45d","sha256":"84afff9cb5a40bb7e76719ca6f83114a7fab1aa0821be3aa13703118fe408ac9","sha512":"6b734424edc0a166917b2f831cbfb603a00ad6966a069aed6a7d7dc37557dabe3ea521c4da842cb0bd8287d1636c27c6ed4299bc04a7d38fd0d9a8898e0fc796","ssdeep":"768:Poe5Y5hERL5F9rJzI3Yn4zLhzTF+0PqPRj6zDHPVkBKDgh6HUbN72Of/oY19j1ln:wtwLtOonDHs/hcXr19j1etpGjL","tlshash":"4ae3f852b660e00c725bc11e16ea5918f6522fadc93c5a3412f1af2c2971fc07676fbe","first_seen":"2026-09-19T13:35:01.56114Z","last_seen":"2026-09-19T13:39:46.49802Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SJBNRGF7GN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.095Z","timestamp":1789825119095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-SJBNRGF7GN HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\nexpires: Sat, 19 Sep 2026 13:38:39 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175394\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523820,"size_decoded":175998,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"cf8e95c907b08b9edb8ce01f7022639f","sha1":"2f300ac8c664408943717d47071166575e03a405","sha256":"2e91ad37551ce8d7bd618ebb4d217520679e0444d48d9a7dfdb61fd5a8c747cc","sha512":"b4efea857467a47ce7e45fddfcf5261d7d60ebdb01c65c879d2d0ec19db7ff47703d25c16e111c31de2a6020545ba701be9352bb5b292823e761a170f1f480e5","ssdeep":"6144:HxqbI1rBQ5PN1gbcn76+4bcc6MbBEAF33GBAmrc1od45znljf:HYY29AbqxAx1oK5Z","tlshash":"51b408ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","first_seen":"2026-09-19T13:39:46.499007Z","last_seen":"2026-09-19T13:39:46.499007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":39,"receive":51,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/44/small/xrp-symbol-white-128.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.126Z","timestamp":1789825119126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/44/small/xrp-symbol-white-128.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 594\r\nx-amz-id-2: GlkL1bNjeRBpiSr4Z/IjuYS/WZs0t9BGnPrPggnfdjvNMiwXT70UFMJpu3t1HwZBVXBdn+WrNxY=\r\nx-amz-request-id: JHTAFKEQFD3SZW1S\r\nlast-modified: Thu, 19 Nov 2020 09:38:53 GMT\r\netag: \"1ed36d280916ecfaa451eafeb7dc83e0\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i\r\nx-content-type-options: nosniff\r\ncf-polished: ok, orig_size=1492\r\nvary: accept, accept-encoding\r\nage: 1047625\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf2999d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":594,"size_decoded":1429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8eabefbd64e3b57ad8670c177e05c396","sha1":"4f08e1d6a7792ef4efab13f4f6f6f0122ddd80fd","sha256":"6406a6617381988eef31d9a9fc1d2cef14e1ebf167c71384a9840fc6bf658e17","sha512":"cb9467afaf05dbd9e9848688c833ae9b0af19bdc21c5c398defe5faace98dd962b1383fc18059248c50e7077f0af63ca7a24456ea72c775037af3edf6bd66f72","ssdeep":"","tlshash":"a7f002b09273e52af430893845979d4a4c3fe14a04935d17cfa519f38498054e965a6b","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-09-19T13:39:46.500428Z","times_seen":50,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/coins?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.485Z","timestamp":1789825119485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/coins?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2beyde9jSEB5SInZ6ugGMs55z%2FCjCUohtFU%2Fjl06HErDEx%2BJhZdkpceVbfmPpK%2FmgCAPEfw6Sjw5b1PYDSBDCP%2BQAmRHvCVhVqVeWG2x3oOKBbzwfPr58gNRObb18A%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf4c893569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":1054,"mime_type":"text/x-component","magic":"ASCII text","md5":"22d06d7de5a848b6b4736fc624227411","sha1":"2cbe67af79b2253887d418c7f5dd7893beca5735","sha256":"b0d94a6e7d3731980499c63e23fd8fb7368a571277b8206370b9edb59471eef9","sha512":"0898d1d41316d4907ab251c588e5ca89990fddbdf13a8967ecfea472d813c7abcab74582058faaa0c98b130bdf2358514ce1dc826389b5b92e3a4692ba7cfb34","ssdeep":"","tlshash":"abd0a93642122cb72dbe20d0842cc40b280f0a2b229e1cf0a0e21d2963b22ba6583684","first_seen":"2026-09-19T13:35:01.642544Z","last_seen":"2026-09-19T13:39:46.501438Z","times_seen":2,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/swap/usdc-to-usdt?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.758Z","timestamp":1789825119758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/swap/usdc-to-usdt?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_SJBNRGF7GN=GS2.1.s1789825119$o1$g0$t1789825119$j60$l0$h0; _ga=GA1.1.15953272.1789825120\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vpd5JNdibW%2Bxu0skKGHznATZxWNeAWnTRHuWCbenpDP07kVmhm6Gn%2FY263ERmAxg4er6J9WxqRu8OqtfwTr%2BPAs6%2Fqrg%2FjgL5Gz9x0fo5SLs1nHxCmuXNDFRvfD%2BspA%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf688d3569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":1072,"mime_type":"text/x-component","magic":"ASCII text","md5":"14dc69b0565b6fd09e941a09defbc552","sha1":"a691504167a10611545b00d4bc43df0258797255","sha256":"fb61fe6ba75d6def7c2d4204e240c02384d4cb502a09e261434e9d2ac4325a01","sha512":"6ee708ea40742ac1f813462e0385ef01eeb021fd8de23ffd1508bb1aedd9d0f0c7e9101ce31121e4e8ac27d6dad12d3b9ba5f1bd7ed2e382da582b3973f22d7f","ssdeep":"","tlshash":"aed05e23422629b72dbf50d0843ed44b794f192b239e1df490e21e2963a2a7a95836d5","first_seen":"2026-09-19T13:35:01.602434Z","last_seen":"2026-09-19T13:39:46.502624Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lanechat-cdn.com/v1/usage/start?host=coinswap.now","fqdn":"api.lanechat-cdn.com","domain":"lanechat-cdn.com","tld":"com"},"ip":{"addr":"104.21.86.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:46.946Z","timestamp":1789825126946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lanechat-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 17:53:01 GMT","end":"Tue, 03 Nov 2026 18:51:24 GMT"},"fingerprint":{"sha1":"84:02:8A:2A:79:FA:27:E3:B1:DD:32:3C:B2:AE:50:44:C5:14:91:38","sha256":"8E:F6:4C:BC:2C:2D:D3:0B:0C:C6:8B:15:AD:71:C6:42:24:F6:99:85:B1:04:EE:D1:CD:7A:34:88:27:45:02:99"}}},"request":{"raw":"POST /v1/usage/start?host=coinswap.now HTTP/1.1\r\nHost: api.lanechat-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJjbGllbnRfaWQiOjEwMDAwMjMzNzYsImFwcF9pZCI6MTAwMDA4LCJhcHBfcHViIjoiYXBwXzhkOGVmNDE4NmNjMzg1N2M4ODVkZDk2YTY1YjJmYmQ2IiwidHlwZSI6InZpc2l0b3IiLCJpYXQiOjE3ODk4MjUxMjYsImV4cCI6MTc4OTkxMTUyNn0.ikcwNPBDaJHOWcZ-ZIC3X5-_KCfclf9_e5T16uer0Vc\r\nContent-Length: 430\r\nOrigin: https://coinswap.now\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":430,"data":"{\"appId\":\"app_8d8ef4186cc3857c885dd96a65b2fbd6\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"screenWidth\":1280,\"screenHeight\":1024,\"language\":\"en-US\",\"platform\":\"Linux x86_64\",\"timeZone\":\"UTC\",\"timestamp\":1789825126940,\"page_title\":\"CoinSwap — Compare Crypto Swap Rates \u0026 Exchange Instantly\",\"url\":\"https://coinswap.now/\",\"visitor_token\":\"4cbd2aa5-b5ec-4346-a774-e2ece840bb2e\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:47 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://coinswap.now\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Accept, Origin\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, no-cache\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suXioM25a8QIS%2B2v5kJgg7%2BM5j6cY%2B3LY%2FXDP30yqqYXvu96zGj4N4%2BxtdawGSCHA2ihO3xstfTFku347mCyqiN0fmeSWFad8IgwIQxHHFbrzOIqqkNFgN02Y3LG4KELc1PNOYyN5w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3d8fe23ed5a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1114,"size_decoded":1617,"mime_type":"application/json","magic":"JSON text data","md5":"ef0c06af74f03f8580031998f95b426a","sha1":"4d03f9e1ca1f5dd8176b56c8d5ddf47e218c04fa","sha256":"1b92c401da030f31b36b4e96aee6f32af4716badcd8d89ca0fb4b0202c7162c3","sha512":"a383cdcb20179f37cd8b96cc85a03a1a19e9264a5767db3ab974cf54798b0733f144c0b0efdaf349c254e39ac8a75d95a78823591f164f311c6046e852671654","ssdeep":"","tlshash":"7121dd1e96606c6e279562e1f21e3b071db509936c417b20caedcc2d77fa9c83327523","first_seen":"2026-09-19T13:39:46.503926Z","last_seen":"2026-09-19T13:39:46.503926Z","times_seen":1,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/logo.png","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.100Z","timestamp":1789825119100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Jul 2026 16:07:44 GMT\r\netag: W/\"b2b-19f7b222b40\"\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPIbbJq5rAOEhY6hQ%2FE1AC0BfUdAJQ7kWKa7exvqLCA4cgagAq22FIt2f85ozII%2FQHctxX%2FFlSKx%2BNlgmVBT0cl3mb4K6lw5VomWwn3JO0A1XxdxGZ35XBS8ZuFwTJE%3D\"}]}\r\ncf-ray: a3d8fdf26840569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2859\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2859,"size_decoded":3607,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a0f34119784066ffba497f3719ae7b98","sha1":"8cccffe05925e99d9dd30f3f88e04b1e54937154","sha256":"c6b9aa0d89d5b3be6b55379424af0dc72fe0252190fdccc23b5bfcc002b33d96","sha512":"762e1456e19e4d712c119081d96792ed4dcfc564d47ea0cdfce04289212d890874c59962bd5833429aaf3d563b97faf6a68643f3c55e840aaa98089c6666a88a","ssdeep":"","tlshash":"ea513ddaea6309c8d149942b735fa44089ed0196d4924406ebb5c35eae5705de3cc3d9","first_seen":"2026-09-19T13:35:01.652388Z","last_seen":"2026-09-19T13:39:46.505977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/webpack-db0199c3179b9b2f.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.068Z","timestamp":1789825119068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/webpack-db0199c3179b9b2f.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"1d0a-1a057e3d8f1\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLbofJiAf45LG5EX2xcfMaAw1V0THBMK6JL3f8Ju90waZBySomB6DF5CG%2BQc9wnVIFXq9DSE8B3kj%2Bp8sdzwRh%2FyXQWb6kknKhosclEY8SpT4Q7rwC5Tl%2Fd8DIBmkhA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3d8fdf2382c569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7434,"size_decoded":4963,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7434), with no line terminators","md5":"ac747b9990e0d14cd2da8b225643ca12","sha1":"3c8269f3b5efdcfa807b2e5796714a985e83af06","sha256":"796c4b8a97ddcb324ce63cf1e9577696f0e16c040fd006503b182871917f6d60","sha512":"f6eec38d31bc37bf7426990c670529def9b6ff122b9bdd006888cb2eb8342ce829c03d20598567458dc9a407e7b77b698dfe217efd67e98cbc08da77d388cbe6","ssdeep":"192:IYb7ARGebpMDYRr4okKrFUfID8ktcXB77:HF6M2zkKrFUZSwP","tlshash":"50e13da97768fce62b7004c2ec2a42e0f9447133765e58f0f19aed795468db54222ff1","first_seen":"2026-09-19T13:35:01.573158Z","last_seen":"2026-09-19T13:39:46.507289Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/1255-ab54a41c275880be.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.072Z","timestamp":1789825119072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/1255-ab54a41c275880be.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"2a744-1a057e3d905\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvrPHuuL4CSLyZF8wOV%2FYYds77u33UMhAMgQ4CVx7xVKXfdDjyVh%2Bu0JH6CZH8z5JX1RQM%2B%2FNjXaD6wEhx9y4RXJ%2FEUeAp3Bq9LC2VLSJMAlZ%2BUp2htsNBGmgXjqs90%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf2382e569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173892,"size_decoded":46909,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1fa6781c69a1456d45560e479368246e","sha1":"ec1b0257f26d55006092170c6813e7dffcaaaf01","sha256":"299b8250c227201cb85d3fdf64e396c21570088508695adbc915941e666d9aee","sha512":"4f336f2bc2f43e3445a74869a41db3b1e12107ad2251882ce3c1e3bd5a7e2bd9c5954e3a247bb92e99e9e5ab39c067b2c679b5398847287a7b5fe112f8ea7b1e","ssdeep":"1536:bzigN+KcB/cO5HYHqLVcX27yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNwrky/Sz:37MtmA+ey4r904Aj44RNsz/Sz","tlshash":"3904d9b676d0f8e107a780e5843b400af3291c37146f74a0a3e6dcd975645dea1b3faa","first_seen":"2026-07-04T14:20:28.171895Z","last_seen":"2026-09-19T13:39:46.508322Z","times_seen":425,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/5339-36e713a77052666e.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.087Z","timestamp":1789825119087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/5339-36e713a77052666e.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:50:03 GMT\r\netag: W/\"5e16-1a057dea271\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gFJLAK2jV%2FzJkbXBsoHQVI6fkw%2FHckJCPQC5TKgCR63q3wdf0uVdeT1EeerAzqawMeelV0ZUCHCn%2BIztgd2mhORyNShoskgkKGag5S3ckJok%2BGN6sXFSxAVVjeHVd0%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf2483c569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24086,"size_decoded":7087,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24084), with no line terminators","md5":"d376ae6f164cd14ee722ab9fe5860387","sha1":"c3a8876c58cfa0a059ad3b4e40536099095655ec","sha256":"68c0f3ee3713732f9ce50243aa121a06c066a9c86915c1f8a3dfab23483f8164","sha512":"37ce95cc08ee10856c9ec93c9652f8577ad37bb83c88a654cdcb15ac66a3faaf109bfb0f415faa4393b6cd042153022e09069e4e0f19b4e1b5a51796dd9afc2c","ssdeep":"384:cd8Tz4N3jobbmH7CLHPGsTgyPskGshamP8jLrPqOpvAJ9K/NBC9lmek6TTEVFADD:cd8Tz4N3j4bmH7CLHPGygxPqOpvaENBA","tlshash":"6eb23254b165fffce92b5aec711e942c611e2b98c91b8578f5b93c301a885d4ba03bcc","first_seen":"2026-09-19T13:35:01.597157Z","last_seen":"2026-09-19T13:39:46.508969Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/4128/small/solana.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.114Z","timestamp":1789825119114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/4128/small/solana.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1430\r\nx-amz-id-2: zrJQrzWK6TXupd8NPzGdeO09QgAXyu1fVYwPt17gvAoKK1cWMwQAu8RZJ9ovFNQHqf1CRit1iWA=\r\nx-amz-request-id: 8J611MVZBGQM8TF5\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"9f6644b0f146e9c7cad0c5b20b506082\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cnRoe6CaxjUACi2X2EWAhiEsPtVd4cYj\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-content-type-options: nosniff\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2225\r\npriority: u=4,i\r\nage: 77968\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf2998b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1430,"size_decoded":2367,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"caaae432aba5384b131797a8f9386fe7","sha1":"5594ebc7f633811ab3332d53e7dfd94d9c81a4e8","sha256":"c261f5492b11374ae6a6cfba49718ec139f562122bb4ff534cb4f7abb24d7f42","sha512":"182eff64777b491674afb9134591a1ec4ef187e4385624c80f5fe346daa84aee85e335b93187d2618d5c4b523c40d9fb9cd474d869ff1f70bb1d0e4837610ada","ssdeep":"","tlshash":"f321e6141ac6d88a86fab1a58a608587d47c34ec870cc931c0d2b14a33b044fdfc8b9e","first_seen":"2025-08-06T14:01:03.720041Z","last_seen":"2026-09-19T13:39:46.510576Z","times_seen":110,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/3885.ddcbb70fdc24b3fb.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.452Z","timestamp":1789825119452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/3885.ddcbb70fdc24b3fb.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"1469-1a057e3d8f9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAJxaUvr4Is78PypXw4mH9LnxuU5EF5NpAQP8bOJOj7ESW3O%2F%2BoILAvmtK7a9sYxIB5YpRJhFYHqvEKmW1gqiw66U3%2BIfFdA2EALcllQ9C%2FuZZJ3IlWhCCepD2Wojys%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf49882569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5225,"size_decoded":1835,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5225), with no line terminators","md5":"68b35aefa62c646ec408b52d25960a9f","sha1":"b6818abb48dfd8839ad745404db68fa9796f05c8","sha256":"ff2f9864a9eba5f32d1f21d7e29a04a497d5387c9fa3c6413bb3eecbde48ffa5","sha512":"5dd943d1526f19445eb072820968edfc4fe1990674359d6443048b4c16ccbb64287f6cf0ff8ee87c358cf68f13f2f2915b9b62fbee68bbf58e2451bf58ee40d2","ssdeep":"96:Mz+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+BR:MqpiD470sd9s","tlshash":"9eb1666da5b96ceedc37e48fdc18670d80207f17ee0449f1a999db4f1f25818b4e9540","first_seen":"2025-09-10T05:14:21.971951Z","last_seen":"2026-09-19T13:39:46.511439Z","times_seen":26,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/412.827f0a8e11715fd9.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.458Z","timestamp":1789825119458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/412.827f0a8e11715fd9.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sun, 02 Aug 2026 16:04:50 GMT\r\netag: W/\"5cab-19fc33889ce\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1X5nHQPdnwoCkgotChMTRleIED%2FU4CtHiyv%2Fjuc9c47RSrMhDoS2StZ6sBksjMPN71mh3bD9BrB%2BRgdJX45N4iyiusnfvx57%2F25e91VL0%2BmvONfEUvMHHUTSn%2BG2Kc%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf4a88a569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23723,"size_decoded":5002,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23723), with no line terminators","md5":"7a5f79403b9d397c445271938a4e8c83","sha1":"e19d5f6a3421d3c3468228997a3189af2e138cdc","sha256":"f9d7afd944bf312e8dd3c7aea0e4d616e7e188609f1adfbfc68b1eb8a302b9c2","sha512":"d07a971170a4dc755c69a3fd1fe9251f96d489bc3897bacafd994121d3dfaaa68b87fe29c381ef6dadf12210d489eb982c900755ec557309e774bb5eb45cf9d1","ssdeep":"384:PpByhqW2xs3dwktSu6foTLEQD4zrlqPqI:PpBSqQ3p8BrlqPqI","tlshash":"00b288ada2320d497c3bed6bfa89790db0203fcb8915a4b98f61b154cbd354df2d0651","first_seen":"2025-09-10T05:14:21.959195Z","last_seen":"2026-09-19T13:39:46.512363Z","times_seen":42,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/en/widget?_rsc=c9BZJ8X-vYiReVMz","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.487Z","timestamp":1789825119487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /en/widget?_rsc=c9BZJ8X-vYiReVMz HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinswap.now/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(public)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-router-prefetch: 1\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: text/x-component\r\ncontent-security-policy: frame-ancestors 'self' https://web.telegram.org https://*.telegram.org\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHH%2Fi9aENiZindVA13rr41oFCxEe6YPzuDGnqQ4BouwFHaP22CqQHp7lk%2Bd%2FQoqqBd6rdbbfZRTVMXMSAgvgj9%2F5x%2FqRaFVa1IWjazAFAahwhsghUlXkEfllXFZzPGk%3D\"}]}\r\npriority: u=5,i=?0\r\ncf-ray: a3d8fdf4c894569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":1055,"mime_type":"text/x-component","magic":"ASCII text","md5":"df53fb467a457dcb4dd63534b58ad26a","sha1":"0dfa12f55ff1368058a63819da9ddfac35a46846","sha256":"ebbd4aefaba786e00ffdc819e149c66d3e9eaab714089adaf87dc2969a0a5912","sha512":"e732e287e6d033e1030e1dfb68d0673a0dff6373e3b3a67dc51a9f4c02f8b760a6d2baa67dcf5de02000507fc06fdb6d1359d78f680e9e64075bf0e0188dafc5","ssdeep":"","tlshash":"4cd0a72242122cb32dbe10c0842dd40b280f092b225d1cf490a11d1963721b65583184","first_seen":"2026-09-19T13:35:01.584232Z","last_seen":"2026-09-19T13:39:46.51325Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/_next/static/chunks/app/layout-68228afc49e0e077.js","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.084Z","timestamp":1789825119084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-68228afc49e0e077.js HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 31 Aug 2026 12:55:45 GMT\r\netag: W/\"1b3a-1a057e3d8ed\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nage: 288\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RPLa5RntgaB48vqqcEp0bfTMmKV8qrG9ouAr6cYnmVuIcuLQOkoRPLzYyK4WDRD9pp5vnnOyOUzmsAZ6hBpZfLv0XyJcnyPNHc%2BSYbs3neJBBVoE0RoUznq4smqmd8%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d8fdf24839569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6970,"size_decoded":3583,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6970), with no line terminators","md5":"25e3588e5fd14632a3c29bb12ef3c589","sha1":"f97908e72f93ccf6897b5f1519c1f66c70702fe2","sha256":"c8eed9de177b50e65df23b7c8362a631b9fdd1de3659bf6938cfdee2689165b9","sha512":"bc23b83367d6c956eae094c21e9e08e6d33b18294e57c7965d307035642f637645aac66413f72768a6060fc3740723bbe270504e84ed6a363b8daca375755511","ssdeep":"192:S39odPqXy6UhgC3HLgiVEBdng9b9E+CtFer66:S3Cdcy6kgyrt8gp","tlshash":"d7e14df632c6fcb543a78cd094378207b6192d37241fa450a7eacce07165d8cc1a1f9a","first_seen":"2026-09-19T13:35:01.564691Z","last_seen":"2026-09-19T13:39:46.514109Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/279/small/ethereum.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.110Z","timestamp":1789825119110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 948\r\nx-amz-id-2: qiKzw2+1j6QbKhh/apuyXDxv7ot8j/Ctjhfp+ErNvlZUb2spjoJ3SqH0rW1GoruJZHrL/CBsfsI=\r\nx-amz-request-id: Q805GTDV9B8SQJH7\r\nlast-modified: Tue, 21 Jul 2020 16:28:02 GMT\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\ncf-polished: ok, orig_size=1887\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 985726\r\nexpires: Sun, 19 Sep 2027 13:38:39 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3d8fdf299962efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":948,"size_decoded":1782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31e1aba01328ea90f32d232f715ed6ee","sha1":"78bc3af43f1f851a185985e3eb68c3592be97978","sha256":"8f45cd0b346a8c0f81f590955b0543d96e811e03c85166854aed6cd498ac095f","sha512":"0f618acb05c9f7b4eb219d2c794d189826bfbf8c61bd9a1a59dc6eced364cf5dd154f870a54e227ba14f7c95a218e6d48c8d7d84d7de1e83b7db52361cab138a","ssdeep":"","tlshash":"921194644260a0268abbb00036db414a0134d8e4ee56c54e49b28f07094833e2c84775","first_seen":"2023-05-07T22:03:16Z","last_seen":"2026-09-19T13:39:46.51504Z","times_seen":151,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinswap.now/favicon.ico","fqdn":"coinswap.now","domain":"coinswap.now","tld":"now"},"ip":{"addr":"172.67.157.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinswap.now/","date":"2026-09-19T13:38:39.364Z","timestamp":1789825119364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinswap.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 14:22:18 GMT","end":"Tue, 15 Dec 2026 15:19:53 GMT"},"fingerprint":{"sha1":"89:56:48:25:2E:7E:56:98:60:86:B7:B1:E1:C3:36:3A:97:B5:BA:DB","sha256":"6A:52:1B:BA:B3:71:49:42:5E:0E:A1:91:CC:9C:AF:91:12:64:8D:1D:DD:F8:6E:EF:73:97:2C:A8:FD:7E:6F:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinswap.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinswap.now/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:38:39 GMT\r\ncontent-type: image/x-icon\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=14400, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 19 Sep 2026 13:38:39 GMT\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUhjHMh3680Jgz74zkALttZHzb0cqEZiSjviyGFfW8FXyEVNPH5Ui%2FdI%2FLPoM0C7YPB0rVUeN1xiGh702J%2FRJi%2FYq7yjPU%2FwSubgk%2FHkYF1yFLAe6i%2Fz66cF%2FbGc6JQ%3D\"}]}\r\ncf-ray: a3d8fdf40870569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32038,"size_decoded":9724,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"91f30342a034ae016d6a172a6dc138a3","sha1":"c6b8382f839aa207b338c7f8456a8f5bb6a315ec","sha256":"9373406cae9e6405b6607f71693ff3cae10ad770e7e8052182222e2c349f5b05","sha512":"77f3268301e4ff88caa1fd233d7a57c92e54dce16eaded8ab025da2390244b2ee024a5dc3bf452c3aca021c4bc8f1c86d85ffda2d19e9acb7ea80b716cc4e749","ssdeep":"384:8aL7ixwpg2rp8VhSBa6lA9gdyBD/N4M7Ccmnw72YnL46dtD:CLsA9gdyP4M7CcmwN46dtD","tlshash":"29e246b0099d04b3c2a516b1777b3ebe6c170ec41388a16386c5fcbf693b56b6721563","first_seen":"2026-09-19T13:35:01.677599Z","last_seen":"2026-09-19T13:39:46.515794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"coinswap.now","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}