{"report_id":"e964dc6c-5e07-475a-bffe-45222a203bb7","version":6,"status":"done","tags":[],"date":"2026-04-02T14:42:59Z","url":{"schema":"https","addr":"btcswapxmr.com/","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"104.21.44.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btcswapxmr.com/","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"title":"btcswapxmr — Anonymous Bitcoin ↔ Monero Exchange | No KYC","dom":{"size":104939,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (860)","md5":"b81f175d61fc39fab2e962da0ee09305","sha1":"9c0906c136992e78d10729000aa077b20c64c4bf","sha256":"427cc004f11524a579fae5b6be18d4b3d3abd4428adea6d4d33825ff8ab206a9","sha512":"f80a0e08c809083ae82b7133970758631b67553954c896df1148dc4aeb558f6836857ebfc7c8b1b6c2f2925102be077758976985f88a3e0cb38b6eaffe5926d6","ssdeep":"1536:MM8U3IMzOYd5VRY6u56cF2K4gVYr0Ks1hEbgj:5vziWAKs1aS","tlshash":"d0a3933260f0253b01a782c57ea2ab2b6fa5e643d94e011433ad0be94fd7dd2de1752d","dom_hash":"domhashfb807ae277855a20f45f12fa4293209f","first_seen":"2026-04-02T14:43:02.469651Z","last_seen":"2026-04-02T14:43:02.469651Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"btcswapxmr.com/","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"104.21.44.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T14:42:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"btcswapxmr.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-02","domain_rank":0,"first_seen":"2026-04-02T14:43:00.040825Z","last_seen":"2026-04-02T14:43:00.040825Z","alert_count":7,"request_count":7,"received_data":315094,"sent_data":3394,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btcswapxmr.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T08:54:15.281023Z","times_seen":417965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7eedca7df3aa51818b0e13933d2b5b2d","sha1":"027bc2af9154a724e19019c9e9b04c5d5a1a14d2","sha256":"46b5c098f0e3ea72026372c8cdef552b50ab83a115b3ba5211fa40b495df16c3","sha512":"422fefa17b3e02399d4ead57692ba7d3a6fed11fb0e78163239a1a76a0071dfb330477990f95f78112987ad7e4ce0a6469f6be9229a955be65e2c98f4892cb4c","ssdeep":"","tlshash":"a7b09bbd310551350856547eb855e9e43936750091065610500d4841156594f9520b49","size":115,"data":"","first_seen":"2026-04-02T14:43:02.475849Z","last_seen":"2026-04-02T14:43:02.475849Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/js/app.js?v=2.0","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dff7a4aeebf8809f433041602f15bdf2","sha1":"ab0cfda5d6867982b748ef26c6e409c9f2eb1ede","sha256":"921a1ab9d0dbef4b83a9d08a1dd9eaca40d793c691ca592598041d4b60286096","sha512":"6293f526463f8bad907b04dfb2e2278f466c1b1ebc8da4a692e7887cc8ea2f188f9b123d99cd953d86276d9613a64414796ac9f448173cb5091f9a08c5204d14","ssdeep":"1536:LgDVeJlm8fm0pwQQKmuB3XHgyHX7OHVCdanFtA8csLF:LgxeJDuN","tlshash":"dd33714a39eb30b2a9b3307a5baf5105357a918b240add043e9c87505fd0a605efdff9","size":54487,"data":"","first_seen":"2026-04-02T14:43:02.472287Z","last_seen":"2026-04-02T14:43:02.472287Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a12eb707072ea2c9d1983d943107c9c","sha1":"e0a0477fcb66b8e947311e2f3343fb71f3cf17e7","sha256":"0803f9d421ef64e21be32a837dfba8cf5e90f19c59c6c4f0ef0241d50669d791","sha512":"9ddac8250187d9868a3009919d9b8faa382cc3df6ed52580ed96d3a347c4244651e857850d032893e9cbca34701c52107e68db8788a8c5353a8a62c4412bd646","ssdeep":"","tlshash":"d10102832530053209a1d8a67f81320168da2dfb3c45f425327fbf0e4f4018e48609cc","size":690,"data":"","first_seen":"2026-04-02T14:43:02.476668Z","last_seen":"2026-04-02T14:43:02.476668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"19199c4d984cf3763809c58d15b75d8d","sha1":"04e5912421585a48730e129864c354df37fbdae8","sha256":"a9df2895e6489cd59f3294f65f8921f5870d687b0096735ceee77a66e0556089","sha512":"0f1f3fb49802966f2c24ee5c5870b54c295e6cd050e88ab797325027b9f236d0d20da0d96a7e4ed3635123a4553660033379ef65d30b60ccbdb053a8859b131c","ssdeep":"","tlshash":"17217d0a9edb68732973b02a5f0f6202253b11571149cc04bffc8f950fc252485669dd","size":1443,"data":"","first_seen":"2026-04-02T14:43:02.47757Z","last_seen":"2026-05-17T09:22:19.065448Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btcswapxmr.com/css/styles.css","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcswapxmr.com/","date":"2026-04-02T14:42:37.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcswapxmr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 19:04:43 GMT","end":"Tue, 26 May 2026 20:02:01 GMT"},"fingerprint":{"sha1":"6C:7B:A9:9A:D8:53:3D:72:41:1B:FD:F0:EA:A2:00:B0:A1:C2:57:A8","sha256":"88:55:61:26:5D:CF:89:D8:38:3F:8A:D9:21:D2:B2:DE:F0:64:2F:DB:63:E4:91:09:73:3B:D2:1D:ED:CF:F0:CB"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: btcswapxmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcswapxmr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3pg7h4eseg8shs41qk8qv5ji79\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 14:42:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 18:14:27 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69b45403-112a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 391249\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0f1JsFMdo2Wj%2BdjVwrIuf3a%2BUgQ0Alm%2FEo1L%2BNS642O9QEKWL07kq5CpeA8fmiRAIwvcS5shf3aAfF8ixw6x830dGpEv6G3cflNSJ2VoVJyyHDk5B7b1kuTK9RpcYTqbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6099eabd021a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70307,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d4122b64c2751e53c55c5b5d60dc3e10","sha1":"0e0c139f60d3f76d4a13ea2c5e6cacc5b80c2bc7","sha256":"939c5fb377c6d100ce26b0d5b12377628d0209326453a264bba43c404d15a371","sha512":"77445d48d59f72e9a075cd6cac1e6b1225f32d5d96abf548850dec091bd30a5a3c55442320e12f4b4f7f33e4274c63fe195d6da5d855d8c32964d0b2653cecd7","ssdeep":"1536:8AvB1c1oxzX86KsPrVQfB4bhwX7G7h9UiwoKnq:DoM","tlshash":"016385043171a2bc6c3baa5567af9b6c335cb046ca0dceaabadd20445fc53fd6513b48","first_seen":"2026-04-02T14:43:02.470744Z","last_seen":"2026-04-02T14:43:02.470744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/css/styles.css?v=2.0","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcswapxmr.com/","date":"2026-04-02T14:42:37.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcswapxmr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 19:04:43 GMT","end":"Tue, 26 May 2026 20:02:01 GMT"},"fingerprint":{"sha1":"6C:7B:A9:9A:D8:53:3D:72:41:1B:FD:F0:EA:A2:00:B0:A1:C2:57:A8","sha256":"88:55:61:26:5D:CF:89:D8:38:3F:8A:D9:21:D2:B2:DE:F0:64:2F:DB:63:E4:91:09:73:3B:D2:1D:ED:CF:F0:CB"}}},"request":{"raw":"GET /css/styles.css?v=2.0 HTTP/1.1\r\nHost: btcswapxmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcswapxmr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3pg7h4eseg8shs41qk8qv5ji79\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 14:42:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 18:14:27 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69b45403-112a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 391249\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTEfnorbTh0Ia2J3yO66HMOlp5XfdkvWyRrQJ%2BCF1f8laOcBmB%2FBiePtm2vx9fHv7peUL558TZGY0a%2FTH1IiBY6kOaBhWXvY10Myiqfw%2FVFlIge%2BDp4FzZTT9F0UHk%2BWdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6099eabd031a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70307,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d4122b64c2751e53c55c5b5d60dc3e10","sha1":"0e0c139f60d3f76d4a13ea2c5e6cacc5b80c2bc7","sha256":"939c5fb377c6d100ce26b0d5b12377628d0209326453a264bba43c404d15a371","sha512":"77445d48d59f72e9a075cd6cac1e6b1225f32d5d96abf548850dec091bd30a5a3c55442320e12f4b4f7f33e4274c63fe195d6da5d855d8c32964d0b2653cecd7","ssdeep":"1536:8AvB1c1oxzX86KsPrVQfB4bhwX7G7h9UiwoKnq:DoM","tlshash":"016385043171a2bc6c3baa5567af9b6c335cb046ca0dceaabadd20445fc53fd6513b48","first_seen":"2026-04-02T14:43:02.470744Z","last_seen":"2026-04-02T14:43:02.470744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcswapxmr.com/","date":"2026-04-02T14:42:37.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcswapxmr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 19:04:43 GMT","end":"Tue, 26 May 2026 20:02:01 GMT"},"fingerprint":{"sha1":"6C:7B:A9:9A:D8:53:3D:72:41:1B:FD:F0:EA:A2:00:B0:A1:C2:57:A8","sha256":"88:55:61:26:5D:CF:89:D8:38:3F:8A:D9:21:D2:B2:DE:F0:64:2F:DB:63:E4:91:09:73:3B:D2:1D:ED:CF:F0:CB"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: btcswapxmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcswapxmr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3pg7h4eseg8shs41qk8qv5ji79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 14:42:37 GMT\r\ncontent-type: application/javascript\r\nexpires: Thu, 02 Apr 2026 15:30:37 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kc5A9DYPmLU1oP3a7F7xv4gDJn%2FvEJTtQlq7ZeqUdZAVjZbVWS2XTWefY9FlmrQqVaAm0ao%2Bxlmo6x44IT7f6Yao3%2FstEV3y99hE4u1LAIDn%2FtX0s4T57Ca2QXFns6uSlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e6099eabd091a30-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T08:54:15.281023Z","times_seen":417965,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/js/app.js?v=2.0","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcswapxmr.com/","date":"2026-04-02T14:42:37.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcswapxmr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 19:04:43 GMT","end":"Tue, 26 May 2026 20:02:01 GMT"},"fingerprint":{"sha1":"6C:7B:A9:9A:D8:53:3D:72:41:1B:FD:F0:EA:A2:00:B0:A1:C2:57:A8","sha256":"88:55:61:26:5D:CF:89:D8:38:3F:8A:D9:21:D2:B2:DE:F0:64:2F:DB:63:E4:91:09:73:3B:D2:1D:ED:CF:F0:CB"}}},"request":{"raw":"GET /js/app.js?v=2.0 HTTP/1.1\r\nHost: btcswapxmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcswapxmr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3pg7h4eseg8shs41qk8qv5ji79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 14:42:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 17:11:37 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69b44549-d518\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrH6HKJfdH8URKyT109v7EiQKkEbKlYRwTmtQL8kIjzUm3oIBE%2FFFDX55NIV8j%2BY5HSMotjE1DH8GVqN8fLBr5XYCwvn2%2BKpEer4mGQZvfP9xg3KcChAi8ltaKHD58q70A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6099eabd0c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54552,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"dff7a4aeebf8809f433041602f15bdf2","sha1":"ab0cfda5d6867982b748ef26c6e409c9f2eb1ede","sha256":"921a1ab9d0dbef4b83a9d08a1dd9eaca40d793c691ca592598041d4b60286096","sha512":"6293f526463f8bad907b04dfb2e2278f466c1b1ebc8da4a692e7887cc8ea2f188f9b123d99cd953d86276d9613a64414796ac9f448173cb5091f9a08c5204d14","ssdeep":"1536:LgDVeJlm8fm0pwQQKmuB3XHgyHX7OHVCdanFtA8csLF:LgxeJDuN","tlshash":"dd33714a39eb30b2a9b3307a5baf5105357a918b240add043e9c87505fd0a605efdff9","first_seen":"2026-04-02T14:43:02.472287Z","last_seen":"2026-04-02T14:43:02.472287Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/images/logo.png","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcswapxmr.com/","date":"2026-04-02T14:42:38.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcswapxmr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 19:04:43 GMT","end":"Tue, 26 May 2026 20:02:01 GMT"},"fingerprint":{"sha1":"6C:7B:A9:9A:D8:53:3D:72:41:1B:FD:F0:EA:A2:00:B0:A1:C2:57:A8","sha256":"88:55:61:26:5D:CF:89:D8:38:3F:8A:D9:21:D2:B2:DE:F0:64:2F:DB:63:E4:91:09:73:3B:D2:1D:ED:CF:F0:CB"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: btcswapxmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcswapxmr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3pg7h4eseg8shs41qk8qv5ji79\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 14:42:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 8562\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 17:11:37 GMT\r\npriority: u=6,i=?0\r\netag: \"69b44549-2172\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JdvVDAZmO1zh45ssibae6BC%2B6GG6FCE4g65cM11mbgwP3STDxQmExdoMo4ZAe0LLlDSzmY3q7%2FHfmnTJSBRO3bBjGhPKrqqXyhB0NL9wmkjbM88pxT5mKPsPw4ZCeVXxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6099ec49261a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"63b06e9de7d5cf7b24dfe091c90e1b92","sha1":"b513b40fc92a613e4dc3fd7474cec0a0419964cb","sha256":"05ff7d9d32847f1c97fa0d2ededff863cc7c2bc237af5ca8670ca294f7aabdcb","sha512":"78f2214f1dfd5dbda28d46125669345575c621e77139fb3fde6d3740a4f1d10f6dc79ff3c38488841891316fefc51e0fbda008c18bc1d031925ce5e1904a2d22","ssdeep":"192:6KgpYVXG28wqKwnW48vqVJy1QvREljl41fdEaY7hqk1e6+T1:6vpAXBJ4eqf/vREljq5H6qkeL","tlshash":"b602af394710fe67b7ad89a4f71eddf603d4650526e9935cf50ff093859b4291018ec4","first_seen":"2026-04-02T14:43:02.473216Z","last_seen":"2026-04-02T14:43:02.473216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/images/favicon-16.png","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcswapxmr.com/","date":"2026-04-02T14:42:38.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcswapxmr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 19:04:43 GMT","end":"Tue, 26 May 2026 20:02:01 GMT"},"fingerprint":{"sha1":"6C:7B:A9:9A:D8:53:3D:72:41:1B:FD:F0:EA:A2:00:B0:A1:C2:57:A8","sha256":"88:55:61:26:5D:CF:89:D8:38:3F:8A:D9:21:D2:B2:DE:F0:64:2F:DB:63:E4:91:09:73:3B:D2:1D:ED:CF:F0:CB"}}},"request":{"raw":"GET /images/favicon-16.png HTTP/1.1\r\nHost: btcswapxmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcswapxmr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3pg7h4eseg8shs41qk8qv5ji79\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 14:42:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 671\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 17:11:37 GMT\r\npriority: u=6,i=?0\r\netag: \"69b44549-29f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4G%2B%2BuVV6a9UBb%2Fwq%2BE5zJtSauuRjXr%2BzQo1FPJDDaAhXoA9FqCcwuyoP91QQx0lDseB1UxVJs4FTIDf4B%2FVaJig%2Fwh6LHukwva1%2BPHnUXS3kz9jW17Qb%2BDK81jcHo5h%2BOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6099ec492c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"045e82b94c8ed52fa08bbec9b819ef0e","sha1":"320149a7f807e76aa11fe08cb084b7aabe947f27","sha256":"5dc94edbe2815e01fd6fe4de635cad5a2c3e0d66b37836aeb52b234bbc54425d","sha512":"875d6d093b6eb2e3ff66d90dfec811298cc36c58c1cf9ccb89319f5a70fbfc0618d6e098b0a33f0587cefd317ede8abb8ca4bac1085cb4aafcebfe4622432350","ssdeep":"","tlshash":"f60183b0c1bc65ecdf07e1278803d800ec5a082f26ec988f8b32d0f6a4ab48102332b0","first_seen":"2026-04-02T14:43:02.474002Z","last_seen":"2026-04-02T14:43:02.474002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcswapxmr.com/","fqdn":"btcswapxmr.com","domain":"btcswapxmr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T14:42:37.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcswapxmr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 19:04:43 GMT","end":"Tue, 26 May 2026 20:02:01 GMT"},"fingerprint":{"sha1":"6C:7B:A9:9A:D8:53:3D:72:41:1B:FD:F0:EA:A2:00:B0:A1:C2:57:A8","sha256":"88:55:61:26:5D:CF:89:D8:38:3F:8A:D9:21:D2:B2:DE:F0:64:2F:DB:63:E4:91:09:73:3B:D2:1D:ED:CF:F0:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btcswapxmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 14:42:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY, DENY\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), geolocation=(), microphone=(), camera=()\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-kSQFQezI1Pl9RwBnelvRDQ==' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; connect-src 'self' https://api.coingecko.com; img-src 'self' data: https:; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; media-src 'self' data:;\r\nset-cookie: PHPSESSID=3pg7h4eseg8shs41qk8qv5ji79; path=/; SameSite=Lax; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQBl%2BG7FtBXDZE1QGVTzY3cfKEFlVSayo5B6okJ77uDhScZlyFOOhoUe37At%2FjMgEeraxGPryWGLZx0aCl3KfvfEADf4R4Kjs1U3O4wH7u2kBk8V834lsFzON2bV1TQWFg%3D%3D\"}]}\r\nlink: \u003c/css/styles.css\u003e; rel=preload; as=style\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e6099e6c88f0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-h2-pushed: \u003c/css/styles.css\u003e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":103584,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (778)","md5":"d4abc54087f2a7cada0b0cdb4e1ba97b","sha1":"818d8ddfd3c72d7b78756cea2d9ac7bdc8b60e40","sha256":"0d2c992c7cb2bc70f95c31085d077540d702a865b03b178378145b5c42772e59","sha512":"067e968bff363c85e2d799ac63c31ae0da68f431183aa18700f50fd048bfa27badf937639bdcc1938b5266cb56586700420a4fe4eb1a6f988a50bbf8d8ed4691","ssdeep":"768:EOjO8QHz8Z9o78S6fKKVr/q0rgjJ6xk32xhu8aGqGvEr19bLp:Pj7QHz8Z9oYfKi9KcBch9bLp","tlshash":"cea3723290f4243b01e781c67e62ab2b6f96e647d94e011433ad0be84fdbd92de1746d","first_seen":"2026-04-02T14:43:02.474924Z","last_seen":"2026-04-02T14:43:02.474924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":48,"dns":30,"connect":3,"send":0,"wait":459,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"btcswapxmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}