{"report_id":"e14b5ee0-a603-4fce-889f-33c5491c2de6","version":0,"status":"done","tags":[],"date":"2026-09-19T08:31:20Z","url":{"schema":"http","addr":"slmpieswap.to/","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":0,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"slmpieswap.to/","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"title":"SimpleSwap | Fast Anonymous Crypto Exchange","dom":{"size":28191,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2729)","md5":"43b9519955e45e70a79cd143ddef0f28","sha1":"586525332f4745183acff68f5769dcb274d392ce","sha256":"6cd1bd6365e79749290d3bdd3e3b4adeeb9a25c2359442d93003b584a7aaacb0","sha512":"8b328b4e2b488c0dda34bf6d4db8b6c175033b98189a4099a09e5f66a18aaa7bcda7a0b519399d96003a2acd8f1d0794a2e288947d715c5a1b4dcee4e7eb6303","ssdeep":"768:qbdFK3UBqIIIFYG8VUh26xb0xn30PBOhV2/q:qbdFK3UBqIIIaG8VUh26x45E5IV6q","tlshash":"1ec29462e15437330e6b01e1b07727aab2b6d156f622070473fd87fe0bd5d5c8a27686","dom_hash":"domhash8c0964f86789c66a7a0638515c66d7fb","first_seen":"2026-09-19T08:31:21.321662Z","last_seen":"2026-09-19T08:31:21.321662Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"slmpieswap.to/","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":0,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T08:31:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"slmpieswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.binance.com","ip":{"addr":"3.174.5.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-09-17T02:01:58.803208Z","alert_count":0,"request_count":1,"received_data":988,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"slmpieswap.to","ip":{"addr":"5.188.86.237","port":443,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T07:47:56.890634Z","last_seen":"2026-09-19T07:47:56.890634Z","alert_count":4,"request_count":4,"received_data":56868,"sent_data":2462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slmpieswap.to/","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":443,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c55d7891f96dd9c0cb2ece5617b48ed","sha1":"f2f31f4d09d9d11598e5a883f2429aa32eaaad43","sha256":"e2e3c21dd87fe1a6e9e75c4e6c29d4aae170fb14eab64215992972d9e5be16b8","sha512":"b1f041b81249a6a9fd5aa4c0bfd37c57825d73505b9377af0f2e4c29aa3af52b3d456135292e4d309b39e85b8bd3597d09ad8a4a4a97566ebcbb9ee47688924f","ssdeep":"","tlshash":"b6f050267332732f5f174335c34f270df867655e7d9a4226940804c02de1a0ddca2cd9","size":519,"data":"","first_seen":"2026-09-19T07:48:01.212561Z","last_seen":"2026-09-19T08:31:21.332579Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slmpieswap.to/","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":443,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5496f16a0a2221baabd1c7037bf450b5","sha1":"ab515c4699e89e4da59f1631d799bedf36f202c3","sha256":"133db16ea4a33a2e50c05c627c6d476e28650a67a0b002283e5586c0d09d9cd2","sha512":"d7125097e52dca882299a3d14039b498a2c6a0df6d50d8ba9bb4edd80e15b7da698fd768c5e5eccdd418477891b5836cd7d4de7e807e21bc3b4b12a76028d14e","ssdeep":"","tlshash":"52c02b07f23c2d3608eb830f53951bd67126008b3000003c29b18cce0944c8209d38f0","size":132,"data":"","first_seen":"2026-09-19T07:48:01.213925Z","last_seen":"2026-09-19T08:31:21.333571Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/price?symbols=[%22BTCUSDT%22,%22ETHUSDT%22]","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.174.5.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slmpieswap.to/","date":"2026-09-19T08:30:52.248Z","timestamp":1789806652248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/price?symbols=[%22BTCUSDT%22,%22ETHUSDT%22] HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slmpieswap.to/\r\nOrigin: https://slmpieswap.to\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 92\r\ndate: Sat, 19 Sep 2026 08:30:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: de9037e4-2d5c-4f4e-915e-716760dbad34\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 460054d5d14d008e22e593df0cf303ee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P3\r\nx-amz-cf-id: 55wHs5Fy5A6z1QE-5olfDeDO5PayutteYX4yHb-YPuUKpupwm1DUBg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":92,"size_decoded":988,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"170e5e0738649df33bd912db5abb0c2f","sha1":"2ef61366f494a952c7eb8021b188ca2c1dee5e09","sha256":"32ca1070f62850ac39659a78142674ae55dc5a54e81a8dc098bc5283c66b8b32","sha512":"557e2dc99c264c9e2f22551ba1041afa953377f7cf751ff828af83776923d636ee2ac45bbe77bcab3532228922e836784e2e46c5333b5a7c510a9d1a9b329f77","ssdeep":"","tlshash":"0ab0023752549a79d041d899e8d3762d0a413914c6f6014d919c455445a1756167d7d0","first_seen":"2026-09-19T08:31:21.324793Z","last_seen":"2026-09-19T08:31:21.324793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":256,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slmpieswap.to/favicon-16.png","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":443,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slmpieswap.to/","date":"2026-09-19T08:30:52.349Z","timestamp":1789806652349,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slmpieswap.to","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:21:51 GMT","end":"Tue, 15 Dec 2026 09:21:50 GMT"},"fingerprint":{"sha1":"51:E7:B5:43:28:7F:6D:DF:3A:49:4F:5E:BA:25:89:32:0B:EB:53:40","sha256":"17:02:D1:C3:1A:52:70:F4:F4:54:BF:63:A4:8A:67:11:E8:D6:2E:EC:11:A5:08:55:93:FA:6C:95:D5:6F:A0:19"}}},"request":{"raw":"GET /favicon-16.png HTTP/1.1\r\nHost: slmpieswap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slmpieswap.to/\r\nCookie: PHPSESSID=hbi8f5g18g859a55abn83tb4nk; e3b0c4_83=2ioh86ihtakks; _token=2ioh86ihtakks.1789890437.4.d89aa6f8d0cc9cf1d97c713d6b7582bc; _subid=18uumd0.53.ptl7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:30:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 495\r\nLast-Modified: Tue, 11 Aug 2026 11:20:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a7b0570-1ef\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":495,"size_decoded":742,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"1d244275e949112361181f0989e438ca","sha1":"35a0fd37969385b4bc039a2a7628897d9fb93b73","sha256":"b73e4ff857de6e5d25562409340f716c3ee5472e2c234fa12177b590eb409ec0","sha512":"b337150969fd8f93d6b8d543cd3b2705d9a8ef47d5352593d4c11acf91d37038210ef6995b4adb207498cc7010618e21190908dd5c5ac4d02af4d0e2bc7f210e","ssdeep":"","tlshash":"44f00e53a0355c2bc1fcc1bb4aa470b6a0975da945e7f0ec86514069d12b35e0068f42","first_seen":"2026-07-30T19:28:24.627517Z","last_seen":"2026-09-19T08:31:21.328849Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"slmpieswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slmpieswap.to/","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":443,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:30:51.598Z","timestamp":1789806651598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slmpieswap.to","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:21:51 GMT","end":"Tue, 15 Dec 2026 09:21:50 GMT"},"fingerprint":{"sha1":"51:E7:B5:43:28:7F:6D:DF:3A:49:4F:5E:BA:25:89:32:0B:EB:53:40","sha256":"17:02:D1:C3:1A:52:70:F4:F4:54:BF:63:A4:8A:67:11:E8:D6:2E:EC:11:A5:08:55:93:FA:6C:95:D5:6F:A0:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slmpieswap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:30:51 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=hbi8f5g18g859a55abn83tb4nk; path=/\ne3b0c4_83=2ioh86ihtakks; expires=Sun, 20-Sep-2026 07:47:17 GMT; Max-Age=83786; path=/; domain=.slmpieswap.to; HttpOnly\n_token=2ioh86ihtakks.1789890437.4.d89aa6f8d0cc9cf1d97c713d6b7582bc; expires=Sun, 20-Sep-2026 07:47:17 GMT; Max-Age=83786; path=/; domain=.slmpieswap.to; HttpOnly\n_subid=18uumd0.53.ptl7; expires=Sun, 20-Sep-2026 07:47:17 GMT; Max-Age=83786; path=/; domain=.slmpieswap.to; HttpOnly\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"hbi8f5g18g859a55abn83tb4nk","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=hbi8f5g18g859a55abn83tb4nk; path=/"},{"name":"e3b0c4_83","value":"2ioh86ihtakks","quoted":false,"path":"/","domain":".slmpieswap.to","expires":"2026-09-20T07:47:17Z","raw_expires":"Sun, 20-Sep-2026 07:47:17 GMT","max_age":83786,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"e3b0c4_83=2ioh86ihtakks; expires=Sun, 20-Sep-2026 07:47:17 GMT; Max-Age=83786; path=/; domain=.slmpieswap.to; HttpOnly"},{"name":"_token","value":"2ioh86ihtakks.1789890437.4.d89aa6f8d0cc9cf1d97c713d6b7582bc","quoted":false,"path":"/","domain":".slmpieswap.to","expires":"2026-09-20T07:47:17Z","raw_expires":"Sun, 20-Sep-2026 07:47:17 GMT","max_age":83786,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"_token=2ioh86ihtakks.1789890437.4.d89aa6f8d0cc9cf1d97c713d6b7582bc; expires=Sun, 20-Sep-2026 07:47:17 GMT; Max-Age=83786; path=/; domain=.slmpieswap.to; HttpOnly"},{"name":"_subid","value":"18uumd0.53.ptl7","quoted":false,"path":"/","domain":".slmpieswap.to","expires":"2026-09-20T07:47:17Z","raw_expires":"Sun, 20-Sep-2026 07:47:17 GMT","max_age":83786,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"_subid=18uumd0.53.ptl7; expires=Sun, 20-Sep-2026 07:47:17 GMT; Max-Age=83786; path=/; domain=.slmpieswap.to; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":28232,"size_decoded":9422,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2729)","md5":"c44b360c30fb87c02bde8bcd2a904e8f","sha1":"4de3f18eb422fb2fe1c70bfe234e508036f52676","sha256":"0643c404d2a154575b25bd2e4e52de531a9d03ca2d0c0e54660e0514d28da3ac","sha512":"ad4298964d79e8a90eb7f4a9be515a524bb836916a3c0ae22d7d8b6e2280f41e886ea0466ebd4564e34a9e7914bbcefa1a5e7eb5c37036ce890ad1462d4a6441","ssdeep":"768:YbdFf3UBqIIItxG8VUh26xb0xX30PBOhVmR/:YbdFf3UBqIIIXG8VUh26x4lE5IVE/","tlshash":"a0c29362e1543b330e5b01e1b07727aab2b6d156f622071473fd87fe0bc5d5c8a2768a","first_seen":"2026-09-19T07:48:01.20873Z","last_seen":"2026-09-19T08:31:21.329823Z","times_seen":2,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":11,"connect":30,"send":0,"wait":83,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"slmpieswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slmpieswap.to/home-tqdlte.css?v=1786439968","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":443,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slmpieswap.to/","date":"2026-09-19T08:30:51.955Z","timestamp":1789806651955,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slmpieswap.to","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:21:51 GMT","end":"Tue, 15 Dec 2026 09:21:50 GMT"},"fingerprint":{"sha1":"51:E7:B5:43:28:7F:6D:DF:3A:49:4F:5E:BA:25:89:32:0B:EB:53:40","sha256":"17:02:D1:C3:1A:52:70:F4:F4:54:BF:63:A4:8A:67:11:E8:D6:2E:EC:11:A5:08:55:93:FA:6C:95:D5:6F:A0:19"}}},"request":{"raw":"GET /home-tqdlte.css?v=1786439968 HTTP/1.1\r\nHost: slmpieswap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slmpieswap.to/\r\nCookie: PHPSESSID=hbi8f5g18g859a55abn83tb4nk; e3b0c4_83=2ioh86ihtakks; _token=2ioh86ihtakks.1789890437.4.d89aa6f8d0cc9cf1d97c713d6b7582bc; _subid=18uumd0.53.ptl7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:30:51 GMT\r\nContent-Type: text/css\r\nContent-Length: 11536\r\nLast-Modified: Tue, 11 Aug 2026 11:20:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a7b0570-2d10\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11536,"size_decoded":11785,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (641), with CRLF line terminators","md5":"8429f405fbbfc6b92dac77577f8b5e9e","sha1":"8519b57356a182fde0f57d33f326eb7d91b3893c","sha256":"0e3c595e81646204423dc6ee298623d72cf8dfdcf0f2615d0bd28c33be4282f2","sha512":"6df93f39d595789922af155cb8806dc6dc3462bad71d2dcb782bd7feb66a54950c0ed25295ac0dc5941d67074689b0d46a9ac6d8d0b80a9348d24605ce7ab56e","ssdeep":"192:eJO7bUlCJ3S0vlXqod/I0BP2mjZTI69OfEio9/iQYUHO1BuvFGvXv6:ZiSlaoNo5yY/6","tlshash":"bd32a427a6142028753bd452b2a46aec7918d416f0138bfef9a3b1d6f8c71f3236274c","first_seen":"2026-09-19T07:48:01.210791Z","last_seen":"2026-09-19T08:31:21.330986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"slmpieswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slmpieswap.to/favicon.ico?v=1786439968","fqdn":"slmpieswap.to","domain":"slmpieswap.to","tld":"to"},"ip":{"addr":"5.188.86.237","port":443,"asn":49453,"as":"Global Layer B.V.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slmpieswap.to/","date":"2026-09-19T08:30:51.959Z","timestamp":1789806651959,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slmpieswap.to","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:21:51 GMT","end":"Tue, 15 Dec 2026 09:21:50 GMT"},"fingerprint":{"sha1":"51:E7:B5:43:28:7F:6D:DF:3A:49:4F:5E:BA:25:89:32:0B:EB:53:40","sha256":"17:02:D1:C3:1A:52:70:F4:F4:54:BF:63:A4:8A:67:11:E8:D6:2E:EC:11:A5:08:55:93:FA:6C:95:D5:6F:A0:19"}}},"request":{"raw":"GET /favicon.ico?v=1786439968 HTTP/1.1\r\nHost: slmpieswap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://slmpieswap.to/\r\nCookie: PHPSESSID=hbi8f5g18g859a55abn83tb4nk; e3b0c4_83=2ioh86ihtakks; _token=2ioh86ihtakks.1789890437.4.d89aa6f8d0cc9cf1d97c713d6b7582bc; _subid=18uumd0.53.ptl7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 19 Sep 2026 08:30:51 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15086\r\nLast-Modified: Tue, 11 Aug 2026 11:20:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a7b0570-3aee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15086,"size_decoded":15339,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3773e4484518f726a5a4fd40bf138c29","sha1":"3314f61ed3287adbfd32425e1e0727de76dad689","sha256":"45d6dac7e1fa9bedf3aad31f0720428baac1240727794ce11e259663346b5e31","sha512":"afd32e30261bc5ebe5d43e7ba47f6515f6b9e264f744478539683091526e4bbe44dafa6ef11864009d41a05988b621613284d13bca7ab0a27d0e1f4972148a04","ssdeep":"48:jA3S5sdLNkJqyP1bg0BfGjixTMHxnKPev/3fIE8cXkKRK26N0V88Yj61:j+S+Uj1bg0BfG+hMH4mv/AEB/m61","tlshash":"3262a6d467f4834ec0083a758d12abbe1f50b884d02668c4aca5ec7a3a76c76730f57d","first_seen":"2025-01-26T05:18:39.283343Z","last_seen":"2026-09-19T08:31:21.331809Z","times_seen":25,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":23,"dns":0,"connect":23,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"slmpieswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}