{"report_id":"dfe6318d-f5a0-49c5-8342-1c993be59743","version":6,"status":"done","tags":[],"date":"2026-04-14T14:30:13Z","url":{"schema":"https","addr":"swapdexairpro-ai.fyi","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":0,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"title":"swapdexairpro-ai.fyi - contact with domain owner | Epik.com","dom":{"size":15259,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3796)","md5":"c6615600137680281142b6aafa7df6fb","sha1":"bb1e949e953db2b828f9fc4b92a8111c62271ab4","sha256":"7bc12a2ceae16678eedc9f51c4c52a7bc256f6ade86b1129696567e7027786e5","sha512":"73df76028d4d35a8e25b201c56470e5281a289f2715251c535a83d313757436b1b254e6256e8bf0d85d1f02fe11f69ec03de93b9c9ea92def7851d390dceeb35","ssdeep":"192:68jmrN6tQKdQUueDJdJ1zetDpQ+NcAngiiAi+4mfG+Gwr+:N7XattZyyB2+Pr+","tlshash":"2562fc1168a1d89600db88c86533b6296af84347c50741d8f9bcc7f55fafd7eca73249","dom_hash":"domhash6358526798c28da81ad08fcd04365976","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":0,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T14:30:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"swapdexairpro-ai.fyi","ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":78,"request_count":13,"received_data":196314,"sent_data":6012,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":2,"received_data":24721,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.epik.com","ip":{"addr":"104.18.3.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-04-16","domain_rank":0,"first_seen":"2012-08-03T00:26:01Z","last_seen":"2026-04-08T14:18:55.694092Z","alert_count":0,"request_count":1,"received_data":154193,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":4,"received_data":186250,"sent_data":2232,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-14T21:58:25.016274Z","times_seen":131455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-14T21:58:25.016274Z","times_seen":131455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/js/lab.min.js","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bae8f54eb5be64b131e498e2c233bbc","sha1":"25aa4807d5d07f1dbd9705866fbe6540ad0fd1d5","sha256":"565169484eb0f13570db78742dcf091e83129a2a0471ae485aa13a890f378258","sha512":"3b860cffd6626d791a4d8ee54e3082146b4b1a1566d593dac063e1b31bffd83ea4c1da16d940eb72706198e5db40fa5dae9643189bbe9b70fd9cd409261384c1","ssdeep":"96:BPkpR9+K2AquLFozlqP+rX+MTBhlLs6ANPHPMXIKw/5V6:BORI5AqDzlqKXNhWrhHPM8q","tlshash":"1b91b96a7f94b2b146d1047ed57f514bb4f16963e988c0b05184f4e46cb8fa8016bf5c","size":4493,"data":"","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-04-14T19:25:32.976886Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/js/global.js?v=1","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b08992307bf75cff71e268fe1bec7b7","sha1":"6518204f41cec36228d2c19c2d138cf1c4d972ee","sha256":"24704d232f9937d71f8aec02c4308ed0b1e4fa237e144fc373fd520b6d935076","sha512":"720592d8067acfa2ab3b2a9269258d24a89d35184e9883ab062929146b6e66264cc6fb38fa8f0f29008d3d26323468fa80d22de702c51df4ae692874399c9aa4","ssdeep":"","tlshash":"f241bb1bbca6ad94fe2360bf6c3f610c50377507ba45d2d8765c02814f34ba9981ad78","size":1979,"data":"","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-04-14T19:25:32.978781Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7afd8ec8b107440dd5b9b97ffd741aeb","sha1":"6b2af8755871c434f58401b577c33f98f86278d1","sha256":"1abb7c8345dfea671293202daf2d7edb43f8af648dc0151775db964f7b6c6cde","sha512":"eff67bba71303fef8d65a6a11d71d8add3ee73ccd9d5cb9973aeb95974c1f466d9e2fb84c26df32a4ef992be0ec14ee61f852b4c92effada05623f369e6039fa","ssdeep":"","tlshash":"9bf02bc64092814c13f31669cb5f720ce27718ef2800e632360c41403f1433e476e6ed","size":503,"data":"","first_seen":"2023-03-07T14:52:59Z","last_seen":"2026-04-14T19:25:32.989377Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4565f7185c529cb80f4bf611467329e0","sha1":"276632bf2a2f4187840d650327170a9438886a2c","sha256":"2c7e3d808764189c15cd1d9ebea39226f6c19747cba202f5114cd61c0af47bcd","sha512":"2c544d0358598ecc3efc28f5f15c758615cde7888b27cf4d7b700964309b4b145d1aa75ab26a2d658febd9232a45d2d4c7284727ea295d917d356a38d2cfb92f","ssdeep":"","tlshash":"6ba0228ca020c8808022038833c082822800880f800ca802b20000c30b0000cc002ab0","size":60,"data":"","first_seen":"2023-03-07T14:52:59Z","last_seen":"2026-04-14T19:25:32.990222Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1df7db4198ceaf590098823a286204fb","sha1":"a0da12deb58ea99699e806115a4b2842f6fdfadc","sha256":"f2597d9cc3691e795cdb008e9439bb959ff3bae05ce7f5a244a20415b1130ce7","sha512":"4f50161bf0c7947555a7397bd8590c435131c97d8bc727daf54b02c3c4c8968a6a4a148935d53480c43d8ae9783f773ec96f37c09a303ec15d50e5625eae71b0","ssdeep":"","tlshash":"7b019762be6b7ce880a088b00dbb977fba0a025d238d8cb9844424c45087033a5e72bc","size":753,"data":"","first_seen":"2023-03-07T14:52:59Z","last_seen":"2026-04-14T19:25:32.991129Z","times_seen":414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/images/parking2/payments/in_store_credit.svg","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /images/parking2/payments/in_store_credit.svg HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4567\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"2f4c-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12108,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a6952d1ab89a0ee0a2bab97097f884b","sha1":"c72f92fc267c2fe61d1ceb764e23f691e478741c","sha256":"120204bbbae24282d9fbd493f82f5ce183314bf4a2aec1374c133f8c368bc9b9","sha512":"5e671ed20dfd450c5413be962fea8725603596a52c32d49b2b853e1ff0cf71f79c0274d794c559f3b11a1a454b9b975885fb8f4219d631d41c7488c7a19ed060","ssdeep":"192:Z+i+MWIhTGsTVb6Kt0tf9Ow6Z14/uCiZUV9mL3Hs/hmL9WvMisC0YgjtS75YxQz:Z+i+EhTZt6ntfcD1WVsUYL3TRS75Yi","tlshash":"c44262812736427cb18447fcc2a76c3cbe16ade83910d45ae3e81847d69490c6daadef","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-04-14T19:25:32.974638Z","times_seen":363,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?display=swap\u0026family=Open+Sans:400,600","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css?display=swap\u0026family=Open+Sans:400,600 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Apr 2026 14:29:51 GMT\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12028,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"392ff0c3c55b5c9ea904a0b5bf9792ba","sha1":"22eff5429915379978501ee27adcd419276e6d1b","sha256":"b16e27d0a6fc5cce1be1e217f40c037271ccf9f9bc29f106adf91e11ace794f3","sha512":"f396a52935a2438498e0249f5c23cc5d69a01bd0f67789b7d5d8846a23b56b183bf9e5ac61097d10af599a3f37bb0fe7c3e0981b33a395ca8d6bbe6c8101a75a","ssdeep":"192:aCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIwV4pWzGY:Jt5qY4yf/qY4g","tlshash":"d2420b9000171850ab435de673ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T08:42:41.093329Z","last_seen":"2026-04-14T22:04:40.605731Z","times_seen":2849,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":199,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/css/parking2.min.css?v=6","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /css/parking2.min.css?v=6 HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 3636\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"509c-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20636), with no line terminators","md5":"953a5fc295df6ead7ad17cd8018a4cbe","sha1":"0a93266984d59715aab18dad3c90c8d151dd5b73","sha256":"e06c04a93ef8fe0e24751ca000492cfb41ff8ef335bf7a24e77b474a8248a4b0","sha512":"058cf5c91fa51881de7ececf86cc4ad121ec908eb1954319fb67bb6491a009fb8b2d3fcc96ffc8a4ca75edd9fea68c2b0244726f3c0d479c15327ae1390035c5","ssdeep":"384:hIaxiGWMdUBwqMHoxfsHsasirWTOIfeyp+YBQXHUeNfU1CPoIi:hIAWFosLTJ1C4","tlshash":"06929525aaa430a8e07fcc63798dfe893234493591164efed563d879cac716f13a3349","first_seen":"2023-04-05T16:57:25Z","last_seen":"2026-04-14T19:25:32.98762Z","times_seen":415,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/favicon.ico","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:52 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 371\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"47e-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:52 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"b1108e0d70db20c8606e1a8016caeb81","sha1":"e2fc2a3593c7e8378af9a0ac0e709f2f1c09fc56","sha256":"c5e2b9c7c4a22ec143291554b29883670c6746294588e6a7ef1e7db0565bad8f","sha512":"382f2eb2a9e23e7bcaea3a34f8ddb0907cb54a650dafde6494cd8febbbe518918f49dc6918bc0f3e97dc5a6b340d77893973a409390800f74d412384d2516492","ssdeep":"","tlshash":"3c219e77542f0602ca8d0a7f0fa4c5f45adf6c104af2440788e57e073c71b2c26321b1","first_seen":"2023-05-02T18:37:47Z","last_seen":"2026-04-14T19:25:32.980533Z","times_seen":420,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/images/parking2/payments/paypal.svg","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /images/parking2/payments/paypal.svg HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2984\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"1a65-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6757,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e63bcdaec263e75aa9670af5124057de","sha1":"e8c8736067b21039eedb9f76e457a0d97eda7e1a","sha256":"8f11f3455df73bf6d18b6dd9d3e0d9812300e92ed985621e02a4c0c9121528ed","sha512":"9b67d82fe6c3641b5514fbabf3af9f99160900342a9111067063e3ab5abc5d9544932f918864477874f5209f5a63f366d6bd1afdf91fe5b775a0864fc83082e2","ssdeep":"96:36a2nnH9M+AzOv1psXxw78h5N+enpOwovPZcspPpJ3UXrQt5uu4Yq:36ZnnH9VAqvzyhb+eMxvyspPpFUblufq","tlshash":"21d193c6677593acf142a3f8c117a8b432826ee67712c444e7e51c1be92106e0e79deb","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-04-14T19:25:32.973431Z","times_seen":357,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.epik.com/wp-content/themes/epik-redesign/src/img/icann-accredited-thumb-350x352-332.png","fqdn":"www.epik.com","domain":"epik.com","tld":"com"},"ip":{"addr":"104.18.3.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 08:54:33 GMT","end":"Sat, 30 May 2026 09:54:27 GMT"},"fingerprint":{"sha1":"AD:C3:AD:D4:A3:FF:33:B5:AF:46:D4:FC:4D:FA:A1:6F:7F:91:37:80","sha256":"2B:C7:94:72:D6:48:1B:01:38:74:7D:78:B4:CF:88:9E:D6:EA:19:4E:A6:44:0A:5B:91:C5:D5:91:62:29:A4:0D"}}},"request":{"raw":"GET /wp-content/themes/epik-redesign/src/img/icann-accredited-thumb-350x352-332.png HTTP/1.1\r\nHost: www.epik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 153278\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 00:38:49 GMT\r\netag: \"69d5a399-256be\"\r\nexpires: Tue, 14 Apr 2026 18:29:51 GMT\r\ncache-control: public, max-age=14400\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline'; connect-src 'self' https: wss://app.livehelpnow.net; frame-ancestors 'self' https://corporatetools.zeroheight.com https://global-components.corptools.io\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: MISS\r\ncf-ray: 9ec367b3fe0fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 349 x 352, 16-bit/color RGBA, non-interlaced","md5":"56a9612b982ea70bfd24026df0e2fa74","sha1":"2827d4670469021293baca9f6f258c11aa4dba19","sha256":"23d23396709114fed95f782811c00ba9d2ce144e9eba9bb60d1611a162d92325","sha512":"d0ca278bd759f06197d0369095f41f8346f28f9a063761aa26d1221dbefe35fcb6479d3f092c63338f67d9b95c1ec9fcc14bc30d3a89d29df11b2e622f3da78c","ssdeep":"3072:8jfTUI59xS6Vp+aA18H3rdSSMAbr8vV9lYrBAXSmjuCcvS/7FG7:uLUIZS6XhXkNAcvV96rBR+MSjM","tlshash":"39e312f7045beaa9883e5fdf7402a504d31c3b601e02e16d4b75be223988793fa6bc10","first_seen":"2024-06-06T21:40:29Z","last_seen":"2026-04-14T19:25:32.975697Z","times_seen":353,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":16,"dns":32,"connect":1,"send":0,"wait":204,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/images/opt/css_sprites.png","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /images/opt/css_sprites.png HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/css/parking2.min.css?v=6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 14784\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"39c0-610cd313cdbde\"\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 150, 8-bit/color RGBA, non-interlaced","md5":"b0315122446d6025e63cd553c7fe065c","sha1":"85d8fa7450c94cc70ca28ad07fc31a9b12280199","sha256":"f9fbc88487b65700e274cd9554e3e270e18b5c0085d75403ca079d4010bbfc29","sha512":"7cc5d6519ed6aa7f29235b7d4dcc3aa5e287df2024898353ef4db218aad2e912bba71472d4498726bb1548f31acc8c8967608750c09471f2304a7a5b8e3b05db","ssdeep":"384:y4rABvM3WtDiqXG8e4my4ILPBTbgGSDehg/iwlEOX7Uxoilhq2:y4GsqNhmjIZSDehjp8UxJlhq2","tlshash":"0462d0edc0ede66e963673d356b64bfbc14099f11aa88fa30c23081c5937710476a2c4","first_seen":"2023-05-02T01:47:14Z","last_seen":"2026-04-14T19:25:32.983132Z","times_seen":404,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swapdexairpro-ai.fyi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 00:37:47 GMT\r\nexpires: Mon, 12 Apr 2027 00:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 222724\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-14T21:55:19.452867Z","times_seen":209630,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":106,"dns":3,"connect":21,"send":0,"wait":80,"receive":4,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/images/parking2/payments/ach.svg","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /images/parking2/payments/ach.svg HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4088\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"26c2-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aeeeca9efd19cf90482d9a4e4010ac9","sha1":"e8086fe685ba0d5907aed7e9fb9d6a152f2401d7","sha256":"efcb8731964b2d071021c8d243ed3b435c88464a717cb395024f6cb84c254773","sha512":"470a22d1e9be30c1145ff2f26833085dd1e1690042e0aeff08389e9de170c8bc43741aa226b40dec6ff418e9fc7605b78f1bc02704262c15d2ed0bb6994df7c5","ssdeep":"192:4WNgcvTbpQPK00socldqsBbd+pTxaw/5hr8nA:0cv3pQPKAbq6bSL5wA","tlshash":"b722b650b3f9f2f0b100d7e5536af4707b6339f65a22c2a48ba62e54da4142e0db88d3","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-04-14T19:25:32.985844Z","times_seen":358,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/js/global.js?v=1","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /js/global.js?v=1 HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 815\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"7bb-610cd313d1a5e-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1979,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7b08992307bf75cff71e268fe1bec7b7","sha1":"6518204f41cec36228d2c19c2d138cf1c4d972ee","sha256":"24704d232f9937d71f8aec02c4308ed0b1e4fa237e144fc373fd520b6d935076","sha512":"720592d8067acfa2ab3b2a9269258d24a89d35184e9883ab062929146b6e66264cc6fb38fa8f0f29008d3d26323468fa80d22de702c51df4ae692874399c9aa4","ssdeep":"","tlshash":"f241bb1bbca6ad94fe2360bf6c3f610c50377507ba45d2d8765c02814f34ba9981ad78","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-04-14T19:25:32.978781Z","times_seen":415,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T14:29:50.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.1.33-64+ubuntu22.04.1+deb.sury.org+1\r\naccess-control-allow-origin: http://swapdexairpro-ai.fyi\r\nvary: Accept-Encoding\r\nexpires: Tue, 14 Apr 2026 14:44:50 GMT\r\ncache-control: max-age=900\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11703,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (706)","md5":"52bb50a1048efbbd42dbdfdf64096292","sha1":"cae268990bc306940a07cb37c4f5c459d6ff17eb","sha256":"9c8a66583231c8f85e41ad9a83c194d1e4293b9a9858e6c29ae261e12364da01","sha512":"c6a6492754af09365af1a9f258b5e74719dcfd58cfa3b82b3e857e12460ef4dadb4262221cbe92fcf570749b9ee5a4c044e54710f8c1429dc81ebde61e430cbc","ssdeep":"192:s8jmaCAtQGdQUG3eDJdU1WAin4mfG+GwrW:PhqVw2+PrW","tlshash":"2032672194f550a701e2d0d5be62ba0ebf818147da0585d4f6ac8bc56fd6e73cca334e","first_seen":"2026-04-14T14:30:18.204507Z","last_seen":"2026-04-14T14:30:19.187545Z","times_seen":2,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":268,"dns":9,"connect":116,"send":0,"wait":121,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/css/bootstrap-custom.min.css","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /css/bootstrap-custom.min.css HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 5219\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"61b3-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25011,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25011), with no line terminators","md5":"a0dfdea43ec9daffdbcb4a983ae3b37c","sha1":"0c12475628fc7739fbad4b06d6c05ef56f0c2644","sha256":"c3b57a79ad7f506aab3ebe6521d7d3c9020f69dea6eb56f43f4afd0edb57cb54","sha512":"b7bd41382dbcd8e7346b69a41eb2aa641144ea5cdfab90dfa9a7b8c07c6771573b7eb1a6b7cccf0f8e447a2a2de265d01320bd4b93a754cfce6464eceec24e34","ssdeep":"192:rm1IHSH8wEoyHJSDkJ6kX6BZSYpnL8ET7gQhMpq94ZWsHHbEHEd6iHid7I12sTGm:rzMvEoyHJxhXStLPTsZwMWsuExVX","tlshash":"87b294b6b83035ac61bbc7be35c0ddc9190e91a5ff718ae6f4270c54488a5534eb3c5a","first_seen":"2023-04-05T16:57:25Z","last_seen":"2026-04-14T19:25:32.982252Z","times_seen":415,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?display=swap\u0026family=Roboto:400,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css?display=swap\u0026family=Roboto:400,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Apr 2026 14:29:51 GMT\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4e32070abc078348e9e5e9b9988c9f8a","sha1":"f6a4221b9d88c9640738f370ba6a512efdb9578a","sha256":"d5ad03bcc92672ee24ef497848c0dbae3ef6c6e4fa553e3a8618c8f2be4223b4","sha512":"3ae5a4af3df48fad3611d4d1084b7bc743bd6ed1601a7271cd92cf4e66008b7f16bfdacda980e09dfb9c96760f314a7eb922ec7ba161ca2f794bb71bb4cf5c13","ssdeep":"192:2N9fmN9fN94N9fkN9/qbN9DbqGIwV4BN9nN9uwN9wN9fxN9UN9LN9fvN9/qIN9Ds:89fM919W969yh9/qY4X9N9t9+9fn9y9U","tlshash":"1a321fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T18:28:50.407696Z","last_seen":"2026-04-14T19:25:32.981377Z","times_seen":130,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":83,"dns":4,"connect":21,"send":0,"wait":32,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/images/parking2/bg/a18.jpg","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /images/parking2/bg/a18.jpg HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69830\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"110c6-610cd313ceb7e\"\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x850, components 3","md5":"b42d146949ba703bd24eccfb2fd77952","sha1":"01c50ae233e5c5a54c4e64b0943f5bac2a0671df","sha256":"d3c707d2faf0b09856b1868a625bb1f6535f9ababa1d041ada9e25ed2909d2a9","sha512":"aa2b3b8463cad2ddcb1cdeea70f82966f23ef1685ed9b9c217b1ee5687cc5d20b6c4ea0632d4d1912f6391e359a0ba6b218365896f8dccf5b8c022e3f1caedc4","ssdeep":"1536:/8/eNBiVgwLt5STQOwDlIrP9fPk+1Vlw11VKAp:Twj5gvklIrP5PkOVlw11V/","tlshash":"ef6302cc22c4cf286fc0ab19726bb4d195dd3714d75a063a1e427adbe86167407ed23b","first_seen":"2023-05-02T01:47:14Z","last_seen":"2026-04-14T19:25:32.970676Z","times_seen":405,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/images/epik-domain-names-dark.svg?v=1","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /images/epik-domain-names-dark.svg?v=1 HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1717\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"df4-610cd313cacfe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3572,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54a79e9ebbd158a93f4c156f64dddf22","sha1":"7fcd435dbd3d10a4c3fdfe8266767c8511909be0","sha256":"ba545882b3d3f5283281e96f148b824a413378050d017aa6957f658856f32abe","sha512":"e9f642a52d7d4462179df469c1b936a1b5343c162f05402e05f9abcc9e666a2daa90cc21486ad9e6e48a593f805829b7e74da899a39e442c592bd1af52a54100","ssdeep":"","tlshash":"587143ed3f644de199cc97dabf0150ac20ab60f2fa850a4cc1595a1c78c4aafde15dd3","first_seen":"2023-05-08T01:43:41Z","last_seen":"2026-04-14T19:25:32.972169Z","times_seen":407,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/images/parking2/payments/cc.svg","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /images/parking2/payments/cc.svg HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3605\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"25ec-610cd313d0abe-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9708,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95e6b0f9239493a0002f7b6402b291f","sha1":"f056c91179ea2f78a3008d167b065a27dec34d31","sha256":"5a7e3b9b95cbd9c6aab1ff1d97802322e0528aac98556430e80ca53b9720a4ff","sha512":"6f1ff6713f127767f120cf26baae1b1cdb0dbd9898ebe64b9db3f0133207052d3aa153f2cef85c1a5b554c2b7a3f9a90768402175ff0a46dd8457f6ab10da73d","ssdeep":"192:2k9FjDmbBHxVBo0NKDbi3fHdAb3arU01XKgFjgU8esT5iTftAt4dBAhjN0l:2QBKBM2R9/1Ee8jN0l","tlshash":"7b1232a06734827cb6909abcc23b6474be412ce87e10d519d7ed0c17e45540d4ea7eef","first_seen":"2024-02-13T22:42:34Z","last_seen":"2026-04-14T19:25:32.977839Z","times_seen":357,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swapdexairpro-ai.fyi/js/lab.min.js","fqdn":"swapdexairpro-ai.fyi","domain":"swapdexairpro-ai.fyi","tld":"fyi"},"ip":{"addr":"209.196.146.115","port":443,"asn":394456,"as":"EPIK-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swapdexairpro-ai.fyi","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 16:01:33 GMT","end":"Mon, 22 Jun 2026 16:01:32 GMT"},"fingerprint":{"sha1":"1D:C7:8C:D9:17:22:9A:20:01:16:6C:01:27:10:4D:75:AD:6C:EF:41","sha256":"B1:02:74:90:60:9E:4C:D5:55:1B:BE:F8:90:08:4C:10:50:62:09:9A:3F:06:61:EA:D8:E9:80:87:01:29:2D:33"}}},"request":{"raw":"GET /js/lab.min.js HTTP/1.1\r\nHost: swapdexairpro-ai.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swapdexairpro-ai.fyi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 14 Apr 2026 14:29:51 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1742\r\nlast-modified: Wed, 07 Feb 2024 16:29:00 GMT\r\netag: \"118d-610cd313d399e-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:29:51 GMT\r\ncache-control: max-age=1296000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4493,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4493), with no line terminators","md5":"5bae8f54eb5be64b131e498e2c233bbc","sha1":"25aa4807d5d07f1dbd9705866fbe6540ad0fd1d5","sha256":"565169484eb0f13570db78742dcf091e83129a2a0471ae485aa13a890f378258","sha512":"3b860cffd6626d791a4d8ee54e3082146b4b1a1566d593dac063e1b31bffd83ea4c1da16d940eb72706198e5db40fa5dae9643189bbe9b70fd9cd409261384c1","ssdeep":"96:BPkpR9+K2AquLFozlqP+rX+MTBhlLs6ANPHPMXIKw/5V6:BORI5AqDzlqKXNhWrhHPM8q","tlshash":"1b91b96a7f94b2b146d1047ed57f514bb4f16963e988c0b05184f4e46cb8fa8016bf5c","first_seen":"2023-03-07T01:17:06Z","last_seen":"2026-04-14T19:25:32.976886Z","times_seen":415,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"swapdexairpro-ai.fyi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"swapdexairpro-ai.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swapdexairpro-ai.fyi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 14 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 43563\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-14T21:57:11.865204Z","times_seen":80065,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":97,"dns":4,"connect":25,"send":0,"wait":23,"receive":27,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swapdexairpro-ai.fyi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 02:23:48 GMT\r\nexpires: Wed, 14 Apr 2027 02:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 43563\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-14T21:57:11.865204Z","times_seen":80065,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":112,"dns":2,"connect":23,"send":0,"wait":37,"receive":31,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://swapdexairpro-ai.fyi/","date":"2026-04-14T14:29:51.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://swapdexairpro-ai.fyi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 00:37:47 GMT\r\nexpires: Mon, 12 Apr 2027 00:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 222724\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-14T21:55:19.452867Z","times_seen":209630,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":105,"dns":1,"connect":27,"send":0,"wait":82,"receive":2,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}