{"report_id":"e0ba5cc8-c902-4d9d-9711-e81591f6a0a6","version":6,"status":"done","tags":[],"date":"2026-01-16T14:31:23Z","url":{"schema":"http","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"title":"ScreenConnect Remote Support Software","dom":{"size":31197,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (792)","md5":"a5ef049a83bc5e0f118517ce5d22c309","sha1":"9b7353bdd8b33fa1e717964d36308e12ab98a3c5","sha256":"bf60ba6393cd0d406a7b9b601a596b1398d480aef1843572cc5ca524842b9ebc","sha512":"3f021e964bf747feebd93c6587640bb660f0ef7d73cd46b34f8ccdd2a211ef05bf8e93a23b54aa18e5c8ecde2ee056162cae398eac68ab661b9b2bbb41cc0c0f","ssdeep":"768:4/9yVI9uZdBobW/l/P3/bL/bE/yUJmonumcF/6qw7TAy0tIB9:4/9yVI9WdQipPvb7bkyXccoqVtIB9","tlshash":"2ee2c7d1f38e107341bea06ed96f10c56b7e80f4b021ac23fc799d846be9a4e5751b89","dom_hash":"domhash0459232c9ffd865a2352ef99d7472e57","first_seen":"2026-01-16T14:31:27.029712Z","last_seen":"2026-01-16T14:31:27.029712Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-20T14:31:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"swap-ccw-fi.net","ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-10","domain_rank":0,"first_seen":"2026-01-16T14:31:23.910366Z","last_seen":"2026-01-16T14:31:23.910366Z","alert_count":54,"request_count":27,"received_data":1403812,"sent_data":15765,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"123357abeadcb34d97d32ce82c1df7d9","sha1":"441fb971fe9ff97931ef4e13eb140ce10159bac1","sha256":"675f11617820fc44579016832b8d3cb506495a05fd3f768ded177b5ac4915feb","sha512":"81c2486b7101e3f6255723a2fb31e8c6a1df7a785b62a5b53f20176d25d0642f188f0501e5c17c5a0eabce91c4470b696f6df89f27d66d733ce78a8354db38f5","ssdeep":"","tlshash":"45019e48634d107821ecf16c6e3b7049a73aeedc35f0f49159d28254766173f96c49a5","size":784,"data":"","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-06-05T15:49:40.918214Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5ea3cbbb1a92b37cc29db37f22cf979","sha1":"7afac7a6310a623f317827fac3874803f7002220","sha256":"515d521e9c06dd5930a1023632e0616e0785872456145f6018dba1a8a2a6e389","sha512":"836f8e3cac68fcf3d7aa87366edff1006dcddbd689ba50a271dc219ca3355f3fa0d13ffcf30106847b50ca53624926c8283c26133e83fa513e5bcff3893d8d25","ssdeep":"","tlshash":"4ef0d35ead4b4d6df5d5098291126908039d74667188dd34c6784fa82ad61a68b32542","size":630,"data":"","first_seen":"2026-01-16T14:31:27.112755Z","last_seen":"2026-01-16T14:31:27.112755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da06705106b9234f224ad7be4709e78e","sha1":"fdb4cd5a01ed43d928f175eae4644453178d01c7","sha256":"a1b21336401e5f1c0c3fa29f5fbac682c3709a3d7c6564bda220f8077d7ff855","sha512":"18e2d14bac684cbf5a291d18ba1a89216b7665db74e327b65445438367236c8f4c5b48c85ccfff8523b7879fad63a3ba62e6b246414b9b4ba60beb4c68a4077e","ssdeep":"","tlshash":"1590041044cd5134cc311cdc345173d03d71f0453005f400c03f41145054c114d0dcd4","size":44,"data":"","first_seen":"2023-03-07T01:31:35Z","last_seen":"2026-06-07T03:53:14.791854Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf99e7d55844f62a85f6adfa11b8d2c5","sha1":"353807affa12bce83cad8a0de9f8fa6c181f2fde","sha256":"8787c128c338519c3b0b32ad3de837779d9596677a40a23241fabf7cb61fa7b8","sha512":"a6b1109e3a1f2ccf808744ae223a8ba4ae45408d7c3b8607b636836016911457cb9ad0bea7952066b9f4178226ddb7c3377cf97c7c419549b280a7bb63a27f0e","ssdeep":"","tlshash":"61a022c03c0ecb2233f200802833a2fefbc2c0c8008cf02b08a000c820c08ab0c82232","size":73,"data":"","first_seen":"2024-09-08T11:39:30Z","last_seen":"2026-06-07T03:53:14.793395Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=6e1dd375-8e20-45c7-bd8b-d1220541c4b3","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91d9d6edcec4bd928299fb395ff2287f","sha1":"c31da954e8e52c0e4eeb9377fdd9d65b9cef4b39","sha256":"a190ed347236402ab0b9d31c2fd6b703361e3cce3d4fe86b48ac625d4f58fd7f","sha512":"4836608d86e658f406489cd95d78f4078f36c075c9989e30ac70dd9fc7d3c2fc688b380b103bbd55f2baf83dd81bd8ddaf0be50ddcd8e5789692250b617b1bdc","ssdeep":"6144:RITRvTL92lQ+p/L7i++jri4iXiSKaA9Rb+SdFMKSF:GgpNK8","tlshash":"5b44d58db5f722b282b7713d8b6f4009767542431408dc257c6c9a846fad92da1fafce","size":270794,"data":"","first_seen":"2024-12-20T23:35:34.27114Z","last_seen":"2026-08-08T14:37:15.601902Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28bb7e2b8995951d00f59fb1ec5c4e03","sha1":"7cccf9bc9559d2c1772a50c3b2400d3455850aec","sha256":"90d4cd67c2069af96cff44fa4ee08b987d102b09322221e0fc48f7734e8c7f37","sha512":"e3f13d19ba41dd290c97b4ac87053b1a3ff42b12146c10cfef4daaa2cf7b38994da33606e4dc5ce46327bdb814bd4befc125f3fb17fe1fe481ed7037b34b8a26","ssdeep":"192:TV28APIKKBovzRz6zL/ORM/PWQRr/bhbVFQdRgHWm/bg9sJGF/y2LJmhU:TV28ZKKBobW/ORM/PtRr/blVedRu/b5m","tlshash":"1a223092f3cd1072a1bee04e99be10c66b3c91b0b471bc26fc64d9c46be961b1751b8c","size":9946,"data":"","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-06-05T15:49:40.929229Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c4b1584f2218fbd717ca047cb6d283d","sha1":"7e254181e15aecd73e2eb0741870acfa4b98c6da","sha256":"03c72fd3d53880ba85283337eef9d5642cd0a096602e33f67d53e968de1afef3","sha512":"27ff19429b9de8c04903ae7684e9ad09e5af893f098a8731ecf61d4b824af13a2e59845b09f22712000fe51149a83de83b2ab93f571dbfc7fc0050e7b732cadc","ssdeep":"384:lDuxnumcxKiJ/6q15c8ASULFyY/D5uy0tIkZ71SCT:EnumcF/6qw7TAy0tIBw","tlshash":"0272b7e1f39f64b3457e903eda0e00c5ab7e40f1d0119c33fc3a9d8859e9a8d5296b99","size":16292,"data":"","first_seen":"2024-05-16T12:51:22Z","last_seen":"2026-06-07T03:53:14.79629Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Script.ashx?__Cache=02ec6c32-a568-45f8-8e4a-747e2ca80dcf","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a49c205d05bc1444b590f68447ed0b3f","sha1":"98ab1796bcd2d5fa615b310965bd410f22e40a47","sha256":"43af9624e1e2d734cb0601c38b5176fb752b33a13c2fba7ed2fbdbdb92e4788d","sha512":"d3b0669b74a11762215d36e0f9edb544eeaf81aaba3574516ac573fc0832d936de08e2740e2899d5985cca33fb6975cad8ff8be29d95838663b74bf4a3d2d429","ssdeep":"1536:tZ0Xf9ZJQio1XBt84h2/XXJZVPvEmD0tNTPShr9gEfOhv5FW5jNR4tA96K:6UhgJZVPvEJtNTKhruhv5FW5EA96K","tlshash":"604472056bfe34ba710751f6ec37d8af3aeca499272ec4a3bd7f8215d34641401a235a","size":267507,"data":"","first_seen":"2026-01-16T14:31:27.103124Z","last_seen":"2026-01-16T14:31:27.103124Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"swap-ccw-fi.net/Images/Extras.svg","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:00.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /Images/Extras.svg HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nvary: accept-encoding\r\ncontent-type: image/svg+xml\r\nexpires: Sat, 17 Jan 2026 14:31:01 GMT\r\nlast-modified: Wed, 24 Jul 2024 03:11:42 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:01 GMT\r\ncf-cache-status: MISS\r\netag: W/\"1DADD7734F26B00\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fajrAXaXqWrSAE6ihRq9wYCgaKs650hGq3EBtyyFE0UG37uAv4hDi%2BGsutThuhy9J2UAHa59j7o3CmxtLfvZicjLuaDDoL0%2FGIotQws%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bee5065d9f20b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"813c72f0a4741978669871e3800d5279","sha1":"ae5e036f992577f8afca3d99a352f44a217c2c2a","sha256":"8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061","sha512":"bcb4de8eba321bfe1ec092e53c87275143508b2e3298a099ae0bc90449557ae741ad34b36795538c6a10493e9937c36fe2fb230513ff56fac05f2aae5ee8f796","ssdeep":"","tlshash":"3be08c40cf18378c7a5885942b2ce4990493e2abb0ce82d5a1cd1038f74476ae9f3292","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-08-13T15:03:14.187609Z","times_seen":658,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:00.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 60\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},0]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSl4W34TtEWfqwcg5TaX19JhaK%2BvUG%2Fofs9xiRH0BdLjCXhhHpyG7rLkGvc6DLvcFtzucsBrwZ6hPM%2FD88P1OgPtlWeCCIbJZtjcG20%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:00 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee5065f9f60b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7880b95208b08172ef7e488c0c200cac","sha1":"e96962294bdbfca6778451de9573c44ec5fa2ffa","sha256":"fcd7482585d15cb58bc3409ae673ba02034e265c1515c461051cfe253cdbdffa","sha512":"5f3230cc0e464a5655e4759156fa4335288c32108d272bf33c6a9e000947a0bd5f60819603485765aa96c0fff5352850b9aad1463270880e3631684e74096e71","ssdeep":"","tlshash":"a4c09b8e967625f50dcdc3389d771960dbf212117075e4b6079100ed53e637d0651679","first_seen":"2026-01-16T14:31:27.035346Z","last_seen":"2026-01-16T14:31:27.035346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Images/ActivityIndicator.gif","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:00.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /Images/ActivityIndicator.gif HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/App_Themes/DarkWithBlue/Default.css?__Cache=462c57e5-1ca7-40bb-b613-a87eba785203\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\ncontent-length: 27503\r\ncontent-type: image/gif\r\nexpires: Sat, 17 Jan 2026 14:31:01 GMT\r\nlast-modified: Wed, 24 Jul 2024 03:11:42 GMT\r\naccept-ranges: bytes\r\netag: \"1DADD7734F26B00\"\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:01 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bSM%2Bm96UK1I53IcfmwHlRsgBeUWwpNvMUJdAj1mPDXi90Ruu%2B0Sdq14wF5urq5cXCgxxJqhAX7PJ8FRCgScEGDJ1hTR69bylDhXP0Ao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bee5065f9f80b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27503,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c63792b958d231654ab54542fea871db","sha1":"c21cfffa5cbd2a7c94076324fe28c4596df92e0c","sha256":"9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a","sha512":"adf5f76d848c6ecc5c0fc00e51f6ad76d716a3daea6417b533a7a0d00004dd0bba2a7f9c2743fd4a5b83fc4c1ce4178dcc64808254ba110a1774fc0208d78760","ssdeep":"384:ZPEb1PVCcijMhRFO9eiHcptlHdEw6ZCI1wsas2B/uyPs83VRKwaT+zJuXd:ZPAfCLMhzCxKdw1mpJT3bL0auN","tlshash":"61c2f14e883d941e94f546207b212b8c65126eea68dc01fdca9bfa289cdf73cb119dd1","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-08-10T20:43:47.741849Z","times_seen":669,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:12.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453295]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p27mDL9ffVga%2FKccA5Huz9TJij7jLxEBJWXp2DJkeAT0QlPo%2Bkbn5BYB7uIoOYeXfs9ZhwmElDR1v7T9YQ60JO3blEfWL0OW1mbdVIU%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:12 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50ad8b900b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c76e39a6d8b301a50a922673690b71f9","sha1":"fa42c9bf7cd80a3b4d7b6b41b9c54c38d1f5957a","sha256":"c2d8b8cd56857bff1e1b29ba363543c062a89030b01b866af079464cdbeeede4","sha512":"ce4bc4593c8ef34ad3dc1398f807959331ebb0df8d3c0a764602487c68c2aabf85304af20437dacaf2906c30ef6f99f99cb95161f77399caadd623e4215ff56d","ssdeep":"","tlshash":"58c04c8a966529f50d8983389d671950d7b112117075a4a606a1009953a636d0651669","first_seen":"2026-01-16T14:31:27.038725Z","last_seen":"2026-01-16T14:31:27.038725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T14:30:59.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 14:30:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\np3p: CP=\"NON CUR OUR STP STA PRE\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XefScq8nJ4q0i7iixhAjucUGis9SEoBJ%2Fi1L5avluNtL%2BAiG4tFS6JdN0m84i%2BzcbfUSC3pURSwIN34FlyCkTuQUx80DKAXxnMQ7lUE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bee505b6a89569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29914,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (647), with CRLF line terminators","md5":"10ea2e8de5e9c27a3a7d9658130c7890","sha1":"f51de94c9ee0ce7f21690c13ebf2cb8d0c246058","sha256":"aa978150a636d0b5c61971a7c32ea357a5e68f409f75abedda0c8edcaaeaf391","sha512":"6895d4ae2b055f6e212c77182f67bfe7d6748fa110401ae0b3eae6786b6c0a79d49caa508bba347c5531e41974a3ecaae2bc3e3dabca89b55f1fb03ecd99b596","ssdeep":"768:avOwZW/e/1h/Q0/Qg/pkkk8LTqDY/MmAGgxVO/D:QOPK19Q0QIpyfcMNVO/D","tlshash":"31d2a8e1b18f10b745fe912ed57a1084ef3dc0f0a021e432fc6a9d886be968a5751bcd","first_seen":"2026-01-16T14:31:27.040594Z","last_seen":"2026-01-16T14:31:27.040594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":36,"dns":17,"connect":1,"send":0,"wait":392,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Images/ActionCenter.svg","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:00.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /Images/ActionCenter.svg HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nvary: accept-encoding\r\ncontent-type: image/svg+xml\r\nexpires: Sat, 17 Jan 2026 14:31:00 GMT\r\nlast-modified: Wed, 24 Jul 2024 03:11:42 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:00 GMT\r\ncf-cache-status: MISS\r\netag: W/\"1DADD7734F26B00\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrWUd54hYA7FSYM07T0UhS6oSpmrMdKs%2FwoRPS7uTbiGWEuUEU7SZ3MIlxH4yQYhyaugOYbOsxiTXzE%2Bl7s2f%2B0fmmnb9MNnTFk46gA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bee5065e9f30b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76fa773933e8313a93f5dee59e919d83","sha1":"db438d4795023149a335dfe1c7dcfa1c5f09fee6","sha256":"81fce97d96268840367d7f9119333c8bfccf3a633a68006a87240288a085b0b1","sha512":"797b037627c3f3ebedcb4629ff8019b68d525c707fe969c9b8a7e2d816816009dd8cc470ce6447031f1b8835b05ebc30116a4f41e9c20b34e026e920a89428d7","ssdeep":"","tlshash":"cbe02d11a2ac4d1c7f220310cf7cb2f1023232ae234d124ce85c323c840850eb837ee8","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-08-13T15:03:14.188177Z","times_seen":614,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Images/Applications.svg","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:00.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /Images/Applications.svg HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nvary: accept-encoding\r\ncontent-type: image/svg+xml\r\nexpires: Sat, 17 Jan 2026 14:31:01 GMT\r\nlast-modified: Wed, 24 Jul 2024 03:11:42 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:01 GMT\r\ncf-cache-status: MISS\r\netag: W/\"1DADD7734F26B00\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U0iUqTLtO5AiJm97cnw2R43665JFQaiGAAgUdmkn%2FGu1%2B6Dp8NRY4wELHZhOcIG9rqCTSytawcGNYb2nhwGatSDgz6jJOgLVXg9Grkw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bee5065e9f40b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":821,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2599340bf60ee89b13e6b91beefe1199","sha1":"4e0babcd7fdcabc1759ed0f130e06972340c5127","sha256":"5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d","sha512":"b22ab922530cbabc1c9a2800218f620060b1be8b69ef67d47a8aba5f3897b1e651d1cf8025e933cfa70cc26fa8e50f8ac0f4318e51d3f876f2cef3f6b278ad19","ssdeep":"","tlshash":"8f018c6882e92a3e61136678d39085c53493f0c2ebb40918e8e4311983b4c43ef6db6f","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-08-13T15:03:14.191303Z","times_seen":661,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:01.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453279]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKIqpgI%2Bd5n1DgAPV0l9qcC9qv6XeoNLLpJIY91v2sRDNeSta8eTbpvjEDxb0pugTiAW9a5wtZPfvdDpP2vOqS98aSNeR8FhYBJJwyY%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:02 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee506d0a330b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d2cff9a582e3906aeec3f6ed59934fe","sha1":"88aae46f1a411cbc8c2d87240a54972e01cf0093","sha256":"b6c8eea0d4080bec419f5d8a4504d9a11574cc86eb6517326edf7ffb1e5ecf31","sha512":"d9d2d69ac08f13e93a7613dc2d0465e55d5188b7dc72dc5be58dac52e8564dac68f681f6c238ccc21edf7e1d041dca76cb582d58aa1c3a894559cb22b40105ec","ssdeep":"","tlshash":"4ec02b8ec63235f50cccc3388d371810c7f0120030b5e4b60391009843ea33c025067a","first_seen":"2026-01-16T14:31:27.055725Z","last_seen":"2026-01-16T14:31:27.055725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:08.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453287]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bukiPk8BLCoEjSjOTcB8NCvrGQnHg0kXl408zzNmSQEqBe4xpLCiHxErrX15R14X863VCCd3OZEB1POGWlEyLWLAYqgz%2BxoNYIYSmVk%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:08 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50982b380b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b98325447b4f30f200bf75bd7502494c","sha1":"57fad7480d8cb1e7eee2c321bfc4482c8a184060","sha256":"5d8d0affde3da256e602bbe984610cb441247a2d529edb831f3554ff0d0a81af","sha512":"5a33ed71cfa1fd7867291f09399cc82f45b76210e04d0ebfd4044150497894ee695ccb325929f0fda48686174ccefd986d01fcefbb8f6a008d80ce3c6128e2b0","ssdeep":"","tlshash":"9dc02b8e863225f50cccc3388d371810c7f0120030b5e4b6039100ac43e633d0250679","first_seen":"2026-01-16T14:31:27.057611Z","last_seen":"2026-01-16T14:31:27.057611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:15.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453305]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXFJnkNrmcPHTLW2Qf5lzBtApFLGo5wJhiPsEa0zJQ4czFZJzFeHa4Fuyu6b%2F1pz%2BaAoz96UCfkMLs8ub10wb8fOZB1bqmYZ2tSWFqM%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:15 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50c2ebe80b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cbb0274556fa083b0e8a8292fa48d258","sha1":"da965d0fd6055bd77c738b13c0e3fa3d0d2e2b76","sha256":"0bc87cbb41b69f10e2fe65998dc38beb9ebecefe04896311c4e20396830c6ff8","sha512":"adb3b8afed18ab1b503803768ce80c992071133171eabb67a2a5710512242a84b57e611cb5ebbcdebdd4dbcefba8683665dfa06d6ad1e6334f43967343addab9","ssdeep":"","tlshash":"c6c02b8e863125f50cccc338cd371810c7f012103074e0b70291009843fa33c0290779","first_seen":"2026-01-16T14:31:27.066502Z","last_seen":"2026-01-16T14:31:27.066502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:03.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453280]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MiMUhzEQQb9ZnqKwUejjSUSGZIca4Pw%2BmfEXvvg1ObwQ31OAm3YEfGSiEN1Pu4mY98eQ56SgZaco2v5%2Fgk9r9CeEurMsUBoFN92j9xk%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:03 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50747ab10b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a018e51ac89c99fbc5b42b1c21ecf94c","sha1":"e7def36674aa72692bf83ea7e026cdcdf3c71960","sha256":"a4b204a817d3278e5537ae6807e1f6bdd192b3a4810007c4b38a3204abdea7d7","sha512":"6631ee4949f533c5df9e14ebd2fc141bd888f95ea04b6b40296f496a5bd5592fac09929cd8817c00732a287c120b1697472347332cf65fef0827fac080ce1dda","ssdeep":"","tlshash":"97c02bce867225f50cccc3388d371810d7f0130030b5e0b607910098c3e633d0251679","first_seen":"2026-01-16T14:31:27.068674Z","last_seen":"2026-01-16T14:31:27.068674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:04.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453281]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BYElO5BroY5Wtmb%2FA64SSXxHIut4j1yiMsDYmFR5mta8RVUq3D5jwVF6jvaeyfZjXwf0jrsfOr2pIPdmULFlorV6UIXSYm0NwKEdgk%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:04 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee507b9acb0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1d283761ca62bf4ee68b4f03df7eba17","sha1":"f9befd3204695d36d096b9434a7746f62c10e11a","sha256":"175d163e1e110139d765f44116935ca65622de00a2358a128f1135ff7d43fa72","sha512":"fdadb3e27b47a612ae10ee7887ccbe403dd2c5ab51f2969b204d99ea64ffad86da1ddfdeadd3364134f0a4392b6142fee51825c6b7193e2e5d02b0d5e44e3f97","ssdeep":"","tlshash":"72c02b8f863325f50cccc3388d371910c7f0120030b5e0b60391009943e633c0250e79","first_seen":"2026-01-16T14:31:27.071133Z","last_seen":"2026-01-16T14:31:27.071133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/App_Themes/DarkWithBlue/Default.css?r=Page.Background\u0026__Cache=303907","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:00.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /App_Themes/DarkWithBlue/Default.css?r=Page.Background\u0026__Cache=303907 HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/App_Themes/DarkWithBlue/Default.css?__Cache=462c57e5-1ca7-40bb-b613-a87eba785203\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\ncontent-length: 303907\r\ncontent-type: image/jpeg\r\nexpires: Fri, 16 Jan 2026 15:31:01 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:01 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 16 Jan 2026 14:31:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9e3XNaaGg%2BgAb9Pwt1xFfrLWKs%2B2DEyCDDmKbVnSumx40lL16K0fxc4wNm%2BUk6rBXXQvEVqHv0Bykty5DGXpbNJp9c3wce0SYvHfJEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9bee5065f9f70b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x864, components 3","md5":"cd670a89a63ff8f5877a822db82fa28d","sha1":"516d0c232c56c60e39881316c8a0cde8ece05aaa","sha256":"2b3c11ee1799eebb4846f6e6c48edd2e8e35c5213929ea0c61910bf453a0c626","sha512":"752f2e099537e4c85114b26eb0faecf87fc8d7e99aa2ccbfb663b37670327776fd1d2ca2cc17cdb8c97fb7ec483c43eb3d0b17fac8e6d7de0a8c55aa09a3a620","ssdeep":"6144:X+LSlNBZ77QH9JtFqYu+/W1j005VnWdPfqv+CQHkpISuKn/kpdfZp:X+L+7Ibgl+/WdN58dQ+ChpISuK/kxD","tlshash":"3d5423b3e4b7f518343c5a95717f4811aaf44ea3aa53d35b81c8db7048c8ac9f9c7192","first_seen":"2026-01-16T14:31:27.073973Z","last_seen":"2026-01-16T14:31:27.073973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":632,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/FavIcon.axd?__Cache=0bd5317a-6503-4423-a9c3-f7ac5a197398","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:01.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /FavIcon.axd?__Cache=0bd5317a-6503-4423-a9c3-f7ac5a197398 HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEfvZifDYEmUFDd5vLYwlbFPx4IkopdYxj4SPQq0zZqoNqV0stEEBjRxQ9YYzrtvzlgtE2WV1QGnOCWmSDya35faNul4cRcTuEXPMpU%3D\"}]}\r\ncontent-type: image/vnd.microsoft.icon\r\nexpires: Fri, 16 Jan 2026 15:31:01 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:01 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9bee5069ba2b0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 4 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 4 bits/pixel","md5":"d9c91e92af6776e767700c6f0c258ec0","sha1":"d083b5b8f069abd44ba4c30d806220375ce3e7ee","sha256":"0b95167676069a859a7535ce88e2b9f82520485d0102400d6d3e38a21f7c1f72","sha512":"06db40e54216ddc7f20de265a4c1b4d6cd054e64e305aa9d1300b9024662dd43a0796715bb95b88680cd6d4b94041159680e8888bb356a007177959bb1b591f0","ssdeep":"","tlshash":"5d3129c98342143cd04d53380c675212fec3914a4a83ba651f4f1a661533b169ff7ad0","first_seen":"2024-12-20T23:35:34.287272Z","last_seen":"2026-08-13T15:03:14.189522Z","times_seen":477,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:05.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453282]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfOBHgrZ4ifeTHMbnoPfCalo383avHVKcRKwwBisHkX%2BDuhFABWAHN490R2mUdWuobeMkiGxtapR0lk1u4eGLGh8mVZmmDCqapB5Ik0%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:05 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee5082bae10b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f65c8990c8c3bdd7ccd0f2508c28b9a4","sha1":"b73a662cc22f71730fcc9fe94317b55e8a261350","sha256":"958a7d93c32a33b89bcb2d496ad493d3676610b15ae7ef2baa7dee5d6e0f1f96","sha512":"faa5bc017aaa8bf79b9a8b9969355614506e65ae12f82a1397ac8a93d65956b5b677f21bb74aaa44d6cbb3a3e8acf3c2b73c9455fa55849f56e80a8fa1ad1edb","ssdeep":"","tlshash":"a1c02b8e8b3225f50cccc3388d371810c7f0120030b5e0ba03a100a853e633c0250a79","first_seen":"2026-01-16T14:31:27.079051Z","last_seen":"2026-01-16T14:31:27.079051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:11.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453292]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6cotO%2FdhyGlsaIWGywVgcm4Rp3Dz70xec2dgXrh00xipiRd2n1%2BxCfrReU%2BivwHN0TlvDZKgSaphUPY1IMiXD7MI4mXBWN7ze8w0Ew%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:11 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50a66b700b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5c4bb20a917940f8d24ee787909dba0a","sha1":"93af16741bdacf4a634fcf147a76ff53faea8763","sha256":"395fa0db96752c484fab3b67f78635e5695917dbb1e0011caef25120b7465f33","sha512":"265ede6fcbd96b711145621503df79705e05d9942e13eed82e212906c0454b907415dccdbbb0df634c9fa0990f81f5bcf2c653c3419306d43cc08a1c2cb1cdfc","ssdeep":"","tlshash":"87c08c8a966125b50c8883389d271810d7b012003075a0a6029100a843a632c0650669","first_seen":"2026-01-16T14:31:27.080913Z","last_seen":"2026-01-16T14:31:27.080913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:14.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453302]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHLhOvrcO2gOlDojyxD2wLkXWu%2FOTFkmHL60GSqOjucvbsQw5pR%2BUCE9bXL030w0k5s9B5%2BByC76E62Yj4%2F40z3S5NYSlP0tgHSmMkI%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:14 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50bbcbcf0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aa14b2be34d0bbaeb992d5af8a6ac2c1","sha1":"eae0192ea81e97483b81e3197ea005978940c413","sha256":"12afc69a0aaa715a3825e2b3bcb916ce6437c355229dd33d07da2d2e2f10e182","sha512":"807bfbb65f4b8d1c88223e00a5eafdf7a1a9f75c2e6a6238c9a66a4049639adcddcb70c66326967dbb13e17af56b09cfc6dcffcbc6aa59d634d70b7ea37fe147","ssdeep":"","tlshash":"46c09b8e967125f55dcdc3388d771950d7f112117075e4b7069100a953fa37d0651679","first_seen":"2026-01-16T14:31:27.083202Z","last_seen":"2026-01-16T14:31:27.083202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:17.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453317]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgyATT8o%2BI8bPTzrlE1%2FZYXJwzdH81qEB4Kszr0gjtCUTS1ax2MQfSOiRhUfubibOkgj5UNhgWYrh6pFBYhftbNcAviy08HKtAtzvmk%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:18 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50d13c1e0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"462e8bff6049478c150fe9a87b394652","sha1":"fba66edc5f7d72e89a11029ede37d0fd63931aa6","sha256":"7c6224e96011f023ffbe7ea30283b837c8dc5fb0f49de136c6e5fd67d44224a5","sha512":"23d3426b527e9d803df4a0baccce94575aa5453758b877ec4667ba7060f076dc4438b33df66bf94c705cfb57b968017365ec201df3e91aa9330aa101931e5bbd","ssdeep":"","tlshash":"bec09b8f967125f50dcdc3388d371990d7f112157075e4b607d1009953ea37d0651a79","first_seen":"2026-01-16T14:31:27.085989Z","last_seen":"2026-01-16T14:31:27.085989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:06.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453283]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2fp5oTu%2FEduuM7YVgH7OeuSsyDcrth1bMWUM9edEJdAw4o2a50ycrRt%2B9qXtmXlpKc%2FA8JO8f2OdMA3H50vgMxt8wkSnSlswa7KIse8%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:06 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee5089eaf80b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd8961205e94610d224c8ad4a114944a","sha1":"35377a8d26141c41e31346c875c5866e0cbdc00e","sha256":"ec31bf32e443d8919cb638855df8ec9668e21e106a4213b19a63b35454ff0dd5","sha512":"2030833135a6d5696323b80e36d4d3e6b321cd1cf0bd655bc191b8d24d7abe451ad7d1cdff180db34ff4b306858b11474f4e924a59d23481df93545835b886fb","ssdeep":"","tlshash":"8dc02b8e863225f60cccc3388d371810c7f0120130b5e0b60391009843e633c0350679","first_seen":"2026-01-16T14:31:27.088713Z","last_seen":"2026-01-16T14:31:27.088713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:07.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453284]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9JZ%2FyQ4zCQljiVOBxy6aoVRZZOSnXs9WPLNsjKD1mtWChbWS69pkfi7hcR%2FTsuQV2onWXlRz2Id53wgeNr3Rx%2BPY36UQqeImmb2Pt8%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:07 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50910b160b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e048d37636c9422b00dfc557f96f7007","sha1":"f0517094b781a3570eb0ae5d8e91cc591e1543e6","sha256":"852cb3e98211a581c222e84a97a5c6cce9128faf677b52133c897e9fe5a0db8d","sha512":"1a779a4c8d9dae689d4c3718daa34551a7e3b2ae6576d05e99e384f4d283c631f5814bfd3650de252236a854515793f5ad78e32f61f76ed3fb922b9b0f06d4f8","ssdeep":"","tlshash":"c3c02b8e863225f50cccc33c8d371810c7f0120070b5e0b603a1009843e633c0250679","first_seen":"2026-01-16T14:31:27.093Z","last_seen":"2026-01-16T14:31:27.093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:09.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453289]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yh3z9ByiZ1yIyFVHAzLiSvO8PRG%2Fd%2BDOz0iCZ6gquTtbqdXjJM37N9XxX44tpFOSWJdRrmOWinOOtHuDS6tlBqpr4GfX7IhWO6LDt3w%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:10 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee509f4b510b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"edc3068473caef3b2b11ac94dccc33f9","sha1":"fbbbb2a4bc7726bdd6e145afbfe9647a54e9fe1d","sha256":"5e627bf80d85a255c8ba29ddb6c77854a6fb3696bf7228a3ab2dc343b8b92282","sha512":"379452f5583dda8a97e5d91519cdbdd252a0595229b39ab729a52be79b69613548d8a5ebf75e9e937b01ece5ef3864ebbe12ed406cbb2d9933e31d55bf02ac8f","ssdeep":"","tlshash":"35c08c8b866229b50c8883389d271910c7b012003074a0a60291009843a632c0650a69","first_seen":"2026-01-16T14:31:27.094995Z","last_seen":"2026-01-16T14:31:27.094995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:13.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453297]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=644RtCN9dEC4So0wPDhNOIRxKWgKcvDoVbhLfWf8W4a733ifc%2Bu7HBEJQ3HWCpxR4YPbNHbhH3D5Yoemxd5gOAmpmDfQByRqB5f0fxo%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:13 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50b4abb90b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2933e682940c8bd31334c21134b81801","sha1":"d9904b15cc35e20d42bc988e92c4e3f71638ef49","sha256":"d52a37e2ba723b500daa4bae285436f01ff8685c12c9afbd136f83e393e169bf","sha512":"7a654c87e83b6356b96d1686e4b80c3db2f20e61d5583a7ec61da2016a740b27503de60bcb310d15df8bd5b04ff4b0a471c1711e109af2f717332a18050e2af7","ssdeep":"","tlshash":"dcc09b8f967126f54dcdc3388d771950d7f112157075e4b60691009953fa37d0651b79","first_seen":"2026-01-16T14:31:27.096809Z","last_seen":"2026-01-16T14:31:27.096809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:16.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453306]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FYhGs%2Bj24UUiroApelerB5hRH2RUXoZHpmJIjMfWJgrtwqbLfZWqfC6a1KahkFNcg16olaigK97426EESZKgKSGwP0l3%2BOO2C4ysLk%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:16 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50ca1c010b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b13cad8c530fa3fc2daa757a8f26373b","sha1":"841636394ac86a949174c792023409ca5085f6aa","sha256":"1029720fb98d7650335e719c40ca36418ff1c5520030055529f499a050a88529","sha512":"a865266890e0ddb2a62f7b3ed714721a14293f82ef778a82cf87ab0ef31c1b3f4ecc0157350709d2d14cee9f9fe63e625e5263fdfffaf9aca34123c87f17e763","ssdeep":"","tlshash":"d3c09b9e9a7125f50dcdc3388e371950d7f1121170b5e4b606a1009953ea77d0651679","first_seen":"2026-01-16T14:31:27.098626Z","last_seen":"2026-01-16T14:31:27.098626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Services/PageService.ashx/GetLiveData","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:31:19.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: QylxSCUO5vG9N6UAju6xP8wdlSpvMWS9Dxn9EznIM7cBAABE2kaF+MEtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://swap-ccw-fi.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},394453322]"}},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9sBUDirIgJPd2QwWADNvtyMBi37aEvJW6WBNL8PYc8vFlozKLjbjH5w4vt6%2FzTgBUksfIZcl%2F09APpJo1%2FPr6SVVmL6Vzj0mVE%2B%2Fq0%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://swap-ccw-fi.net\r\naccess-control-allow-credentials: true\r\ndate: Fri, 16 Jan 2026 14:31:19 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9bee50d85c300b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a41a44331134be40e786cfdf6b54314f","sha1":"f0bd952f303f54905ef81614dda1746ea07e60ac","sha256":"1a34bbb558ab4f6eca18399ffe7603ab2f41322fa9521a05e2f1e6b6baa73fa9","sha512":"6310e1601535b4611af8ee4d5d06e76db9b8cb4719c563630dc9884dc8b62d079f46bde172d4414893a56484c1a2ad0b0b63ccc7183927e98420ed3d46ea5a9f","ssdeep":"","tlshash":"34c09b8e967125f90dcdc3388d371990d7f122117075e4b607d1009953ea37d0751679","first_seen":"2026-01-16T14:31:27.101011Z","last_seen":"2026-01-16T14:31:27.101011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Script.ashx?__Cache=02ec6c32-a568-45f8-8e4a-747e2ca80dcf","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:30:59.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /Script.ashx?__Cache=02ec6c32-a568-45f8-8e4a-747e2ca80dcf HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAQGf6Gp7%2BXbH0dBVCox0hK93kvB62kula49HJNkuBzFmhpjScCB41Q4D408%2BYuu2%2Bnk6viMP%2BM6THlzf%2Bhpa%2FYdkVunrcIppthRwck%3D\"}]}\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 16 Jan 2026 15:30:59 GMT\r\nvary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:00 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bee505ed99d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267507,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (37060), with CRLF line terminators","md5":"a49c205d05bc1444b590f68447ed0b3f","sha1":"98ab1796bcd2d5fa615b310965bd410f22e40a47","sha256":"43af9624e1e2d734cb0601c38b5176fb752b33a13c2fba7ed2fbdbdb92e4788d","sha512":"d3b0669b74a11762215d36e0f9edb544eeaf81aaba3574516ac573fc0832d936de08e2740e2899d5985cca33fb6975cad8ff8be29d95838663b74bf4a3d2d429","ssdeep":"1536:tZ0Xf9ZJQio1XBt84h2/XXJZVPvEmD0tNTPShr9gEfOhv5FW5jNR4tA96K:6UhgJZVPvEJtNTKhruhv5FW5EA96K","tlshash":"604472056bfe34ba710751f6ec37d8af3aeca499272ec4a3bd7f8215d34641401a235a","first_seen":"2026-01-16T14:31:27.103124Z","last_seen":"2026-01-16T14:31:27.103124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=6e1dd375-8e20-45c7-bd8b-d1220541c4b3","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:30:59.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=6e1dd375-8e20-45c7-bd8b-d1220541c4b3 HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZjJ8Xz4kDuYVg6EOKNh1ZggDymr5GPnqtTDbKlSgB%2B1j0ZcBhRZ1bXfYRiKhELhNSFUIhHGPRamKdXCXZg%2FVs2VmIcSUAVkf%2BqnSqc%3D\"}]}\r\ncontent-type: text/javascript\r\nexpires: Fri, 16 Jan 2026 15:30:59 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:30:59 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bee505ed99f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270794,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"91d9d6edcec4bd928299fb395ff2287f","sha1":"c31da954e8e52c0e4eeb9377fdd9d65b9cef4b39","sha256":"a190ed347236402ab0b9d31c2fd6b703361e3cce3d4fe86b48ac625d4f58fd7f","sha512":"4836608d86e658f406489cd95d78f4078f36c075c9989e30ac70dd9fc7d3c2fc688b380b103bbd55f2baf83dd81bd8ddaf0be50ddcd8e5789692250b617b1bdc","ssdeep":"6144:RITRvTL92lQ+p/L7i++jri4iXiSKaA9Rb+SdFMKSF:GgpNK8","tlshash":"5b44d58db5f722b282b7713d8b6f4009767542431408dc257c6c9a846fad92da1fafce","first_seen":"2024-12-20T23:35:34.27114Z","last_seen":"2026-08-08T14:37:15.601902Z","times_seen":106,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swap-ccw-fi.net/App_Themes/DarkWithBlue/Default.css?__Cache=462c57e5-1ca7-40bb-b613-a87eba785203","fqdn":"swap-ccw-fi.net","domain":"swap-ccw-fi.net","tld":"net"},"ip":{"addr":"104.21.69.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://swap-ccw-fi.net/","date":"2026-01-16T14:30:59.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swap-ccw-fi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 14:00:30 GMT","end":"Fri, 03 Apr 2026 14:58:58 GMT"},"fingerprint":{"sha1":"33:03:33:20:3D:BE:91:78:B4:D8:A4:85:7C:B4:E3:3C:51:9E:23:C1","sha256":"24:B3:69:4C:32:F1:5B:6A:DB:B1:8F:00:BC:DE:BA:07:34:80:41:F4:33:E6:F6:35:0D:B9:EC:95:E5:31:2D:F5"}}},"request":{"raw":"GET /App_Themes/DarkWithBlue/Default.css?__Cache=462c57e5-1ca7-40bb-b613-a87eba785203 HTTP/1.1\r\nHost: swap-ccw-fi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://swap-ccw-fi.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\nexpires: Fri, 16 Jan 2026 15:30:59 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Jan 2026 14:31:00 GMT\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 16 Jan 2026 14:31:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpK%2FX24%2FdO%2FNAVU6N7L34GCOMX2zP4PiD2woeEzMwGAormjg0UhpeUsjo3dGFwF%2F7%2BjIqPUDv4FFETh%2F3qbwsZDJdzXbP3rzgGD6sG8%3D\"}]}\r\ncf-ray: 9bee505ed9a00b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":477844,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27376), with CRLF line terminators","md5":"86fcf7ce412152610e15e4da2cd405ce","sha1":"7e6b256620fe63c652d472c6f3409d644a9e58dd","sha256":"813e28bdb37a2d220a44c2000bd8d590e95db944cdb5e24adb0dacf714e82443","sha512":"ea512954bd25c0b51effc25fd6191722e571702c43c981db124debdc94fee574cd02047038ec1de2026a404348c1a9e3a8d32c593799e323b993515d08a7affe","ssdeep":"3072:g8B+8+a+WGg59pfbE5RvcVyJLeEdfg1aFjbY8EipZQwZOBp3:BRUWGg+jvLFjbYwZEN","tlshash":"48a4e726fb8f56e8c7da452a57b19250de2dc0b1164307f1786a94088f8b3943fa73db","first_seen":"2026-01-16T14:31:27.109165Z","last_seen":"2026-01-16T14:31:27.109165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"swap-ccw-fi.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}