{"report_id":"f692ee0c-c9f5-4f79-b5da-1c39b841f03b","version":6,"status":"done","tags":[],"date":"2026-05-02T12:47:09Z","url":{"schema":"http","addr":"across.to.bridge-and-swap.to","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"title":"Across Protocol – Transfer Assets Between Layer 2s and Mainnet","dom":{"size":247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3d6440a417cd2495bebd9a61e98400f3","sha1":"c86e62882a76d3e577cd82a3db9e35930e296dc2","sha256":"878e41d7b8ab21135bea244b15546e7ac47bd8cf0e5f581fdb91e34602468a3e","sha512":"56e0126915a0ecc5dc32ab9b9066cc2d3b27fc5bcb4aeb7cf590a386c2b2b63b1e1062059fc0c263a61ca8cdfba03dead7d97904c5393956604da72227637708","ssdeep":"","tlshash":"08d09712c805892fac0246a0cb63f380c481872dec31ac30ecf17a30e28d6248a22189","dom_hash":"domhash6238018188ee0df98fb91538b75d7a75","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"across.to.bridge-and-swap.to","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-06T12:47:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.dynamicauth.com","ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-24","domain_rank":1824779,"first_seen":"2023-07-05T19:07:58Z","last_seen":"2026-04-28T23:18:17.038554Z","alert_count":0,"request_count":6,"received_data":12555,"sent_data":4318,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"across.to.bridge-and-swap.to","ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":12,"received_data":220105,"sent_data":5948,"comment":"","tags":null,"fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":62467,"first_seen":"2023-06-27T20:50:44Z","last_seen":"2026-04-28T23:18:16.9862Z","alert_count":0,"request_count":2,"received_data":778641,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":1,"received_data":15252,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metamask-sdk.api.cx.metamask.io","ip":{"addr":"104.18.31.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-02","domain_rank":907454,"first_seen":"2024-11-22T07:39:53Z","last_seen":"2026-04-28T11:27:47.096791Z","alert_count":0,"request_count":1,"received_data":1143,"sent_data":619,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"preview.testnet.across.to","ip":{"addr":"172.67.70.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":351131,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"spongebob.varekuta.top","ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-01","domain_rank":0,"first_seen":"2025-12-24T06:53:19.250994Z","last_seen":"2026-03-20T18:38:02.353995Z","alert_count":0,"request_count":2,"received_data":1769,"sent_data":1092,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-04-27T15:57:25.056289Z","alert_count":0,"request_count":1,"received_data":2162229,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"spngbeb.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-01-19T23:55:31.832342Z","last_seen":"2026-03-20T18:38:01.540937Z","alert_count":0,"request_count":1,"received_data":7381513,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-05-11T18:23:33.648632Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-05-11T18:23:33.655397Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-05-11T18:23:33.65462Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a04c5d31083c64a2e4377618af60947","sha1":"34c7abef378cb001d2f84423b0071562e6457d03","sha256":"243e5db894e0578e39548c927ae0ceb6dc0cc4797b6a762a0edc0fb445c93eca","sha512":"b89e2c6a5741309128c99ed3527a1e922bc2d989beaecc6e662f4cc1fc550449e7c54adfb0bfc5bf3cf93680ab7c7745798f2b661827f91a4f7ca31e33fe2be5","ssdeep":"","tlshash":"ccd0a7182030716914ce282d0c4f08ca7f328411e20849c9d5dc84547ef1f6401d0848","size":216,"data":"","first_seen":"2023-11-18T15:49:03Z","last_seen":"2026-05-11T18:23:33.620847Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-05-11T18:23:33.643309Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-05-11T18:23:33.621915Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-05-11T18:23:33.62409Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-05-11T18:23:33.625324Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"4650c9054b79170ce958ee276f396bd2","sha1":"5359bf261155047ebfac2e3a87c8caafd3704ab8","sha256":"a1f7bbc9543ff1479d58e2cecb937bb032709b87715a5ce35fd76d4d4e816cd3","sha512":"7d81d2081cba9d8fe41e177f327992471e90463581eab4ba21dc2eeada33525917441a3c4efff6e602c16f34cb5cbbb76a159916073967bb31e2c7a6d19a02c3","ssdeep":"","tlshash":"3911564b18b85003691230361ecd28c4a65988b37639bda13e7c22505fa7d283bf7fe9","size":1000,"data":"","first_seen":"2025-10-07T18:48:47.008485Z","last_seen":"2026-05-02T12:50:19.892654Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-05-11T18:23:33.655973Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-05-11T18:23:33.642131Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-05-11T18:23:33.649649Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-05-12T11:12:04.38059Z","times_seen":3098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-05-11T18:23:33.651143Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-05-11T18:23:33.646181Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-12T12:02:36.990823Z","times_seen":307036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/e7cdcce4-eef6-4fe3-8a75-5f5571762505","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"98c72a183c329b2e0d5b9e9358494220","sha1":"4be1b4c30a88c9c6beacf7709fe4857fed1d7517","sha256":"3e8abe3f0ddc82531ad05d065c429f755e4088309f9d12a4ed8dd2a925c3fd25","sha512":"fc73ae0052c27a9ebedd958138573c46bd238b0f27ef18eed644df62aeafa9b191cf7bcfbe22112fd6b186ac79ba969731736a8e7d60a70e75a6940516e4a2fd","ssdeep":"","tlshash":"d71121962081f016019e1dadf173e709bb9030b538efd8d0f05c99f967a9cd4e15454c","size":1000,"data":"","first_seen":"2026-05-02T12:47:20.395117Z","last_seen":"2026-05-02T12:47:20.395117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spngbeb.b-cdn.net/assets/index.js","fqdn":"spngbeb.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7ee11f2ece3a9e4712ad09b7744b261","sha1":"6e39933f387aba2bd8924ff488b5841d9b6ede9f","sha256":"f0d54d36cef6f2bddb53fac4b2ca20d567c8c5a03c1d90bc031fe8d46d40e8eb","sha512":"2e6b836fb31d74b4ad0ecad3d781f2f8f9e05e83b8129cd5c6f954eea97a089ce8fc29da7e501d57bd1353b33e41be4c396f541b8cb64254411421082aa0e414","ssdeep":"49152:H2IjbpjmxeW2pZnvbsNsXN/QpmaQYLFrlVUejLoUMa7+hMVKNFTATgjR2rOHMzvr:Q","tlshash":"bc769f31be029f865c7f3f55cb930f4e8b4abc061cbcc88d54b21985ea697853a1b25d","size":7380535,"data":"","first_seen":"2026-05-02T12:47:20.400214Z","last_seen":"2026-05-02T12:50:19.900522Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-12T12:02:36.990823Z","times_seen":307036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-05-11T18:23:33.644885Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-05-11T18:23:33.643309Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-05-11T18:23:33.623068Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"OPTIONS /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://across.to.bridge-and-swap.to/\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://across.to.bridge-and-swap.to\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=hqpchh36BslpYlackxHc.0sOo_NWeZxSW9yy_8fve1s-1777726009.7418668-1.0.1.1-CFtxX.IRq3lbpywvHJJhJJf9Lo7OF3H.lv6b9vrSZjHuLni6h2gbZaJuBA_6exy3_s0jhaVRCcFTjjLNCZRgKDVKd0CiwoHvFKT6nBXqV73.zRvUb.khEhhkyuhV85xk; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Sat, 02 May 2026 13:16:49 GMT\r\nserver: cloudflare\r\ncf-ray: 9f572188eccc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":40,"dns":2,"connect":3,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"GET /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://across.to.bridge-and-swap.to/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-request-id: _3bNfys5lH0Dt-bJzlQsdFQqd_UhEIbsKDq0MJJAxLIPIecV9i\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://across.to.bridge-and-swap.to\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"1ad1-Nc2T81AuJ+dbZ6ORrXS4oUWDipc\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=fNcLQVXrkanq9nWI9vegJrKIooQvWQAATSiW2b6rWxw-1777726009.9249325-1.0.1.1-kn4cEIxtgdftILfdrmtFaKF2OKAmZxHy0id43tdOwfSNkALd0diFEokOrp8lrxJ82yetezNg03cpBvg79rCeBXucNqcmogaJ_Jc5ul1MMTWnHKIyD_OaBhGy4eESUtGr; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Sat, 02 May 2026 13:16:50 GMT\r\nserver: cloudflare\r\ncf-ray: 9f57218a08494e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6865,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff3022a877d0185c0e10c1608e3e72a6","sha1":"35cd93f3502e27e75b67a391ad74b8a145838a97","sha256":"8cc0e16e7846e43bac4fe057a7f29df7dcc85e3f4d76546151afa4fbf24a8d0d","sha512":"970cdca5301254d4b840de4a2b1222d9ad69f81116edf3aa4ae6c3e17751bacd3d0430d67f55a6f8e640a9ec4cc574e810dc3c79ee6ba9abc9cd3f9340daf4af","ssdeep":"96:ssT3zK3iuLnemsPKTq1hlGvu6+HOr6MA9ja+oEe4smPctRfooUxZkJJtYo1Ju:Ld1blGvuZHO4s6ctRlUx8JtjJu","tlshash":"4be1e05e29242dfd9782d688d41d3b4b46398c3232ea3cfcd5b88a6c51fba950735923","first_seen":"2026-05-02T12:47:20.315335Z","last_seen":"2026-05-02T15:32:07.855955Z","times_seen":3,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T12:46:47.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\netag: W/\"132af-64d12d721e00b\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20946)","md5":"a54a88dce1d021b023f6109a8eeb33a0","sha1":"8b857d46a925f77b4ee49e035fd9cfe4fe03f509","sha256":"08ae00f8a7f07b1ee2a601e16a7dccdd26017b46f7ebf216a26aeba16b60ec1c","sha512":"e8471e34b5583eb4ccd0b993fcb4544209118ec32ee04f6381f9b78b0777a60f35dfc54e316cf76458475521bb9c62ff2a03258d73e5407a4cfe3c0c7ca7b750","ssdeep":"768:e88wNeaDuoM1c/dg2Q0T7Exoy/LSoS/JYtZwTZwHZwbZwssBQJVLp64ujOiC7HiM:e8BEaaogWq2QBJ/Ei/g3np2x4WwvzoCx","tlshash":"a0732b76531031746017fbb8b695df0eb36ab027e70652b8e9e51848c3cfeb449a36c6","first_seen":"2026-05-02T12:47:20.31747Z","last_seen":"2026-05-11T18:23:33.610654Z","times_seen":4,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":141,"dns":70,"connect":19,"send":0,"wait":38,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/eth-4706363e.svg","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /eth-4706363e.svg HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e253-2d4\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43204834f5ecc40e8afe9b7dfcc0ac68","sha1":"7ce763ef1588a388d4a736125d27edbf96483306","sha256":"4706363e664e5d9610f8b2aed887541c6fd3ae1eed19f0112a6e8ed73850d2a1","sha512":"2ef6e60b6d076730ce6d400a4df55afb91ddbbdef8647243fa7e55272ecb6fd4252d7d879f39b297417cda646e7ee8afe8a2028c763a8ec158835d4dc0152cf9","ssdeep":"","tlshash":"9a014cb1610cd08088089fa71a5a10758477dcdec79d9b948b03364bfca95f71cbc5fa","first_seen":"2025-07-12T22:37:05.042375Z","last_seen":"2026-05-11T18:23:33.612731Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/Barlow-Medium.woff2","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /Barlow-Medium.woff2 HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40564\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\netag: \"69b6e256-9e74\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40564, version 1.0","md5":"25662b56578add1e67ae0bba3be27c27","sha1":"5d7a2cf4be9c19b72b66cc84d9163ae833a94de5","sha256":"40c00d311fa3fde13e4cff43e436a923c1dbcf975462922098b132331b4f42df","sha512":"04fdb181dac399f620d5a17ad946c8bd5b156c7dd7ddd0cc0783dac4ea4e8c8f939cdc9f59b95c721c5f1efcc77833f5b3951b7db3afae163c27a4ebee3f201d","ssdeep":"768:TU7muFVRBd05N727kv9Z9tztgQpRk2rXTzCECKsZK7NMkpi97x/3N0IHEf6BN:q1FV7Ch/9tzCj2LJMkC13N0byBN","tlshash":"1b03e188479866f0611c8f31d0f2273406e1c1b0fe3ce6bb985d12f686da71bbd5e098","first_seen":"2023-05-11T20:02:22Z","last_seen":"2026-05-11T18:23:33.599211Z","times_seen":81,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/Barlow-Light.woff2","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /Barlow-Light.woff2 HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36816\r\nlast-modified: Sun, 15 Mar 2026 16:46:12 GMT\r\netag: \"69b6e254-8fd0\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36816, version 1.0","md5":"6db853756aa18d4aa6a4a839246c6098","sha1":"cce9a3ae77fbc276e528f3bb0b298a0fc50af5e0","sha256":"267da4be97ec3941d64b1859f071de01aecddbc67c429cb346201758e73aacd8","sha512":"e666251f3644ea884a2dd5ad74e2b6a8c0a9fea591c13b547da25a8d061e4e32156eebb1f190dbd5501a698d89c9b2933c977e1ce662fb2abbb33298e3348c77","ssdeep":"768:gAUq8rt8FFpiC6ecihGb6TWH0rLvpoZ/kKR6/v3tGylyJyN:gBqBcnLi9iUxZKAdGylyJyN","tlshash":"5df2f18845a91cbc9f70fe12b4e957caf474b28b59c54384b033beb254ea090038772b","first_seen":"2025-06-09T20:45:29.788294Z","last_seen":"2026-05-11T18:23:33.615033Z","times_seen":33,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/Barlow-SemiBold.woff2","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /Barlow-SemiBold.woff2 HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38400\r\nlast-modified: Sun, 15 Mar 2026 16:46:11 GMT\r\netag: \"69b6e253-9600\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38400, version 1.0","md5":"2006a22e6f02c20ae1c78f99ef46c95c","sha1":"1d0e5ceb5e0e9b9d00afadd5ae2c1d8359bd807c","sha256":"a258cde5a53ad91fc29875484d9d7d2e56e7664d329583d8f9860f561a7f516d","sha512":"838f11cfa98c2b306127147580c12a56971fa1ac70f1c38fac4945d30d2ab104cce26044ee7b56b06e437f14f4f5bf7d5c5a3a643949da944ceb896e3a38acb6","ssdeep":"768:rdf/Z94htJWQJqvp5Zu7Iour/uhye1gl+RH4YnYldE2toq+1:pHZ94hf/Jq1u6/uhQ+RHLncG2toqi","tlshash":"2903f1bfb2d5c915e04fbdbcf81a6f7c49069228a706af8a1b341dcc56015d858eaed0","first_seen":"2023-07-06T09:52:02Z","last_seen":"2026-05-12T07:51:11.311823Z","times_seen":217,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/favicon.svg","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:48.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e255-296\"\r\nexpires: Sun, 02 May 2027 12:46:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":662,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4e78ca3ca494b9c160ebae8ccd682ba","sha1":"a6706a54eb69617aeab722239849e2be9c3f4c46","sha256":"abb692d7977eb5afbd9827dfa828feaa5014f64bf0feded9907f981629bd1abd","sha512":"993d30a0b4ec3b8f26d8e1fbaa480dfb5b81d356a8fe8dc821d717c8599b55076f23043397d7d9018de58427dc44cb851c900fb987ae02d4041f1b5a2596cf32","ssdeep":"","tlshash":"200126f8855085d481090b798a1890a56c9130f7380758f8bbe928f4bbf63b7405d6d6","first_seen":"2024-08-20T15:06:20.180703Z","last_seen":"2026-05-11T18:23:33.578959Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"OPTIONS /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://across.to.bridge-and-swap.to/\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://across.to.bridge-and-swap.to\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Qg5lgLRBCwSkXenRfdRczQs7S0MjczI8VmndOyZ5uoE-1777726009.7580073-1.0.1.1-rWs6dJCxTlDhku8CVvzR_Qe_D1E538qvlN..jOOIYp5FzfcyaJYBoWrwkVYJ0h8BRMqOLwW_azGZU5ePnw06_aC2_qGOqP6yLK6QN7ck4k7abIBzABrAX5EY2ttlbvvb; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Sat, 02 May 2026 13:16:49 GMT\r\nserver: cloudflare\r\ncf-ray: 9f572188fd1c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":37,"dns":1,"connect":1,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"POST /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://across.to.bridge-and-swap.to/\r\nContent-Type: application/json\r\nx-dyn-request-id: oO3FQatCoFdx7F3bd2WshLAjIEQZuXWvPLuEWAQg36BQHaFOg9\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-is-global-wallet-popup: false\r\nContent-Length: 1590\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1590,"data":"{\"dynamicContextProps\":{\"settings\":{\"environmentId\":\"c25e9e46-2a0e-47eb-9812-83df4462fef4\",\"walletConnectors\":[\"aNn\"],\"evmNetworks\":[{\"chainId\":1,\"networkId\":1,\"name\":\"Ethereum\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://eth.merkle.io\"],\"blockExplorerUrls\":[\"https://etherscan.io\"]},{\"chainId\":8453,\"networkId\":8453,\"name\":\"Base\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://mainnet.base.org\"],\"blockExplorerUrls\":[\"https://basescan.org\"]},{\"chainId\":42161,\"networkId\":42161,\"name\":\"Arbitrum One\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://arb1.arbitrum.io/rpc\"],\"blockExplorerUrls\":[\"https://arbiscan.io\"]},{\"chainId\":999,\"networkId\":999,\"name\":\"HyperEVM\",\"nativeCurrency\":{\"name\":\"HYPE\",\"symbol\":\"HYPE\",\"decimals\":18},\"rpcUrls\":[\"https://rpc.hyperliquid.xyz/evm\"],\"blockExplorerUrls\":[\"https://explorer.hyperliquid.xyz\"]},{\"chainId\":11155111,\"networkId\":11155111,\"name\":\"Sepolia\",\"nativeCurrency\":{\"name\":\"Sepolia Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://11155111.rpc.thirdweb.com\"],\"blockExplorerUrls\":[\"https://sepolia.etherscan.io\"]}],\"dynamicUserProfileConfiguration\":{\"showDisconnectedButton\":false},\"initialAuthenticationMode\":\"connect-only\",\"cssOverrides\":\"\\n    .goodbase-dynamic-hidden {\\n      display: none !important;\\n    }\\n    .connect-button {\\n      display: none !important;\\n    }\\n  \",\"customPrivacyPolicy\":false,\"customTermsOfServices\":false,\"policiesConsentInnerComponent\":false}},\"frameworkSettings\":{\"react\":{\"version\":\"18.3.1\"}}}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 12:46:50 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://across.to.bridge-and-swap.to\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=E8fdpKXU0zmNqEea2FHC4vtCIPPPvHnkO7o6v.VWYkw-1777726009.951222-1.0.1.1-DskPkUw7MB39pfM5bmVBgSgVl16CTcLzG9lg9.GLBk1rFq2qzjbPFia4XYPaiLWLt.zML9pbHphWIKGEEWZEjK4tR4NTIV8LIud._vZlPFn9QvsW7mBxZHeUbY5GdWgP; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Sat, 02 May 2026 13:16:50 GMT\r\nserver: cloudflare\r\ncf-ray: 9f57218a38c04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 21 Apr 2026 14:14:53 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Sat, 02 May 2026 12:56:49 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 945115\r\nx-static-request-id: Q3S4K9DV71G00GGN\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"0287ff79c39ca306ae0f1c81f5b998c8\"\r\ncontent-encoding: br\r\ncf-ray: 9f572187bd1ab517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":24,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"OPTIONS /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://across.to.bridge-and-swap.to/\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://across.to.bridge-and-swap.to\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=GtU80GTmowl__quAkHzD2IigR8qIU8F7EEjnLgczuhs-1777726009.7668362-1.0.1.1-OHUoTkhDZ0x6c3hy41pwMAIIjbqDKffGcCOa07Id5ndxt12bQe_OEoHkdzMRrtDoZ3aolKbGFggkkab077SlTpZa8xpzoayXJix4vDNafO.Tp_UnwsfBGAi_HGsYREWq; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Sat, 02 May 2026 13:16:49 GMT\r\nserver: cloudflare\r\ncf-ray: 9f5721890d4f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":43,"dns":1,"connect":2,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spongebob.varekuta.top/api/config","fqdn":"spongebob.varekuta.top","domain":"varekuta.top","tld":"top"},"ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varekuta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 03:54:41 GMT","end":"Sat, 25 Jul 2026 04:51:05 GMT"},"fingerprint":{"sha1":"30:28:15:59:22:50:11:F7:AD:6C:7C:6A:6C:82:F8:61:CB:7E:6C:94","sha256":"86:E0:FB:A2:91:6F:72:93:4E:C9:ED:C0:82:1B:C3:CF:CF:ED:45:D1:00:23:56:6B:A6:6D:B8:C4:15:C3:E5:53"}}},"request":{"raw":"POST /api/config HTTP/1.1\r\nHost: spongebob.varekuta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://across.to.bridge-and-swap.to/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"payload\":\"e30=\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Tss5%2F%2B3DejVo0zkFayLZdyhIbHQDWurDzMQhYRPhIvIsaVfKCcVyAUIoDLHZ9nQHaJPk9aP1qm%2FdnuLTGLEy3vV7aukS1%2B%2FR7SSDweqbIWy%2Bq%2BADYU1Is6E%2BsqeEgTj4q67x0CzZMXM\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f572189bb0c1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b588fc000b2bb3b5468be64edb031678","sha1":"033ff58374aa0eabd7beb56cdfe3180cdfceacc7","sha256":"c218e8d4d91d480f467442afbd713af03ee58903c664adaab21be48d94a1f791","sha512":"678d6f81885b59c8ba12a83d5e0874a7a71de3113d46a106a0e583f5b0c14db3fe7705d97ff08c71ccc380b9cd9682cc179bc91694d34893be2766d568c9713f","ssdeep":"","tlshash":"2ae02b0687596f67866e8b40b0572eb7148116a823c40c3a17988d7c67ecfc8b9c27af","first_seen":"2026-05-02T12:47:20.327436Z","last_seen":"2026-05-02T12:50:19.858368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:50.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14200\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220132-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 19311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xj8KaEDN8N3aIGmBWA7gnXaIv2yyN89MYQZFRw3IPFOAjj0pdo%2BlZG%2FusI%2FsSXFs2Iu59cmH05mTWawgblqKD4P4X2K4JhXoNXCQjr%2FwlYAMcS8iXft0LJxpvgkd76NDQx4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f57218ecaa61525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-05-12T10:00:16.524352Z","times_seen":2073,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":13,"dns":0,"connect":1,"send":0,"wait":4,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"metamask-sdk.api.cx.metamask.io/socket.io/?EIO=4\u0026transport=websocket","fqdn":"metamask-sdk.api.cx.metamask.io","domain":"metamask.io","tld":"io"},"ip":{"addr":"104.18.31.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:51.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cx.metamask.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 00:01:47 GMT","end":"Sun, 12 Jul 2026 00:01:46 GMT"},"fingerprint":{"sha1":"59:0D:BF:6B:3C:82:5C:03:D7:A9:70:A2:32:3D:89:4C:9A:1C:F9:E8","sha256":"78:DD:F6:CC:64:96:55:AD:04:13:9D:C4:BF:41:16:DE:92:B4:17:D9:4B:2A:04:4E:C9:F1:7E:78:50:58:52:6E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: metamask-sdk.api.cx.metamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://across.to.bridge-and-swap.to\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jYRFfbigYN3XZicvJFCbkw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 02 May 2026 12:46:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: hfkjOhvV8BfPwpEORkKwI6anP8g=\r\nAccess-Control-Allow-Origin: https://across.to.bridge-and-swap.to\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: AWSALB=cg4FKruHFKX6UdmeCXVry2iaRuvt/TiF2NOOt0+jGaexMwItxeTE31UOOllxkDaOGwHclhQrOnLI60iEvJK80wjYkpzKW9mDty0zlMb6haHgVBu8XENkSVM+YsPz; Expires=Sat, 09 May 2026 12:46:51 GMT; Path=/\nAWSALBCORS=cg4FKruHFKX6UdmeCXVry2iaRuvt/TiF2NOOt0+jGaexMwItxeTE31UOOllxkDaOGwHclhQrOnLI60iEvJK80wjYkpzKW9mDty0zlMb6haHgVBu8XENkSVM+YsPz; Expires=Sat, 09 May 2026 12:46:51 GMT; Path=/; SameSite=None; Secure\n__cf_bm=I.cRsvXEGu24yypvPwhbNCF0Kykct2mOWItROsH0PbM-1777726011-1.0.1.1-ZmS939wWxxUGTh31NkfFbqOp8KJyRhgRCtbPmst2x_liCxy_SJmtEHgcM0URn.zEOP.6gPjfmQtYQCtJ4BzlQE7RYDr9hXjhx.dbJtCLW18; path=/; expires=Sat, 02-May-26 13:16:51 GMT; domain=.api.cx.metamask.io; HttpOnly; Secure; SameSite=None\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9f5721921d770b51-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":0,"dns":18,"connect":18,"send":0,"wait":418,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/cross-13aea53d.svg","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /cross-13aea53d.svg HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e255-2b0\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d875b0d7857799e7cd38a0a9f594722","sha1":"2c3c8e2fa19f1fd0b7854f6a0e895d2b7b61d17c","sha256":"13aea53de42a1b92ddeb2b4a80d5e9ae6a2bfd97b798c605446cbe631393be30","sha512":"6df39f975346c37ebced0577490ae8cb43324f5d2b8f804a7f0eefaa1d8732793dd59071c59d32d36af0fba408bd4c962325e8db0d90d168344f9a435671e771","ssdeep":"","tlshash":"4a017bffe24afe86920457689e3f949520f7a5ff4407059ac08235b1fb943b2121d5c1","first_seen":"2025-07-12T22:37:05.028668Z","last_seen":"2026-05-11T18:23:33.61151Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/solana-3d340110.svg","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /solana-3d340110.svg HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e256-9d7\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1451c141117d732b103931641401bea1","sha1":"303503a4fd0b3c3b49182e8f5c72d1a6d1294d90","sha256":"3d3401109aa061dec40a8659f1847817a8e647f98de1e65e76e86a95bbe1f08a","sha512":"273bc0f2835b65bb58d9e9fd18fd04acd65eb0226283d98f5c63696452158749280eb5abec859cd30871c728e0d7291994d64ee53d0241c20c19a57d99ce6b59","ssdeep":"","tlshash":"ac51569a37f492fb700ed6e8de694456315f66e75c40e0f0c2a4ed0be10a0ce1e19ac5","first_seen":"2023-12-25T15:56:59Z","last_seen":"2026-05-11T18:23:33.594599Z","times_seen":68,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://across.to.bridge-and-swap.to/\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Tue, 21 Apr 2026 14:14:53 GMT\r\nx-static-request-id: S43K6KZFPXE6DJFB\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Sat, 02 May 2026 12:56:49 GMT\r\nage: 19630\r\nserver: cloudflare\r\netag: W/\"0287ff79c39ca306ae0f1c81f5b998c8\"\r\ncontent-encoding: br\r\ncf-ray: 9f5721864ca7b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777369,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0287ff79c39ca306ae0f1c81f5b998c8","sha1":"af75680ba1ed61cdb22db0872cd2bf747719b91b","sha256":"2887567b3ddd327d85df9de7106f3f9e07a0b886bc28b8c9b056330049702380","sha512":"e5e35720dba308bbe5779be684c117408764ace6424964bdd3ece2a406c3235f58409cc6d2563401720103546da86a54306955fa9027b23560116db2efeecc05","ssdeep":"3072:4Qu/pnoYw27us0aSt4rhtFJhnvtxKKiKA:4QuBnoYw2770cvF/nvtxKKiKA","tlshash":"faf46184ca200d8210b5a359dc6ed4d6a424d6578eda3c683bbd45bc4f6c82f25fcafd","first_seen":"2026-04-21T21:47:53.789644Z","last_seen":"2026-05-02T15:32:07.920135Z","times_seen":9,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":26,"dns":6,"connect":1,"send":0,"wait":90,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 21 Apr 2026 14:14:54 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Sat, 02 May 2026 12:56:49 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 945115\r\nx-static-request-id: Q3SE46FZ0JQQ1H82\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"b0afbac8a5383a6b314d681e9e8e5187\"\r\ncontent-encoding: br\r\ncf-ray: 9f572187cd2eb517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2161634,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"006e8ac6bb4d446027a731b304ea5a94","sha1":"75916088149975e67f6bac4136dc28d7fd6e72a2","sha256":"04560945834f8d9d45a8a8efe5bc926f4050436713a7b84f9ad7bff3e2f514e2","sha512":"036df3702881531e61eed2605462c06a70326d35a01f8af2977de853de7587f146892f8dbdfb27aa6a59eb951a360984cb3916b572d3cff231060044914fe4d4","ssdeep":"12288:8HamqgzQRaujhzJJuDeXNqY8GS8my92nxZiFsO2OsoF5fAF0C:0z3ujhzJJuDeXNqY48my9SxZiiOWCf7C","tlshash":"442508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-04-21T08:26:49.246656Z","last_seen":"2026-05-10T14:23:25.802842Z","times_seen":33,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":57,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spongebob.varekuta.top/api/config","fqdn":"spongebob.varekuta.top","domain":"varekuta.top","tld":"top"},"ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varekuta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 03:54:41 GMT","end":"Sat, 25 Jul 2026 04:51:05 GMT"},"fingerprint":{"sha1":"30:28:15:59:22:50:11:F7:AD:6C:7C:6A:6C:82:F8:61:CB:7E:6C:94","sha256":"86:E0:FB:A2:91:6F:72:93:4E:C9:ED:C0:82:1B:C3:CF:CF:ED:45:D1:00:23:56:6B:A6:6D:B8:C4:15:C3:E5:53"}}},"request":{"raw":"OPTIONS /api/config HTTP/1.1\r\nHost: spongebob.varekuta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://across.to.bridge-and-swap.to/\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 12:46:49 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCJyejbsJi7T7fr40FNNcvZrLWU0b4hTGqwzYREgIb%2BqqtUpL3NFGDWSgXGMUS0U5dKnXggA1vakc%2B6LPnCjCf4G9%2FjTvi0fWnGMMQ0IbARs0cyTk66ijPqJ8TSK2nh5cMEA2f14GBif\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f5721892a771ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":69,"dns":51,"connect":1,"send":0,"wait":70,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:49.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"GET /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://across.to.bridge-and-swap.to/\r\nContent-Type: application/json\r\nx-dyn-request-id: 12LCg1dgQ5x9e0sqBBErBL7xxmaIrzEYy7pAOWhn4KGJUIqD4l\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 44\r\nx-frame-options: DENY\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://across.to.bridge-and-swap.to\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"2c-bMcaTXHVYVw/T5KUj7Qdk3pvxwg\"\r\nset-cookie: __cf_bm=cEymAU4jM_woZhEY1Lc_EUF7n9gp60dpkblOtvShY8I-1777726009.971254-1.0.1.1-xJzAYb29f_eULhiqswEUt8CCThIwOtR39Qg0xazNnj84KPOMp6yrpxX5HtG0rCfROYCBrU67QjWzjGyUkAe5yd1vIIvOUIDlb9BWkcqoMhs.tX9M9Y73IcUkYqRwpLmM; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Sat, 02 May 2026 13:16:50 GMT\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9f57218a590c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2cf380d3885c9daecda6e536dda61077","sha1":"6cc71a4d71d5615c3f4f92948fb41d937a6fc708","sha256":"5172f639529d7b349591377a463ffa1b230338849c40ef97f87b13ac726e9901","sha512":"b36b8aa6142d6af3df76f80f7a9f17e57d227eaa67ee948be8009942d9a8e6639913cf3acbbbbffd90fa365de48a1324a34dd0b334e50e776b8f6e47a4c05827","ssdeep":"","tlshash":"81900250c0c8152211060222682d4f5e140616164945750108a5a501021c5870344615","first_seen":"2026-05-02T12:47:20.340259Z","last_seen":"2026-05-02T12:47:20.340259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spngbeb.b-cdn.net/assets/index.js","fqdn":"spngbeb.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index.js HTTP/1.1\r\nHost: spngbeb.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://across.to.bridge-and-swap.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5007570\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: W/\"69f45e23-709e37\"\r\nlast-modified: Fri, 01 May 2026 08:02:43 GMT\r\ncdn-storageserver: DE-634\r\ncdn-fileserver: 1151\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/02/2026 12:46:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9ac54b5fe573074d23b73fac2b0fb98f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7380535,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"86607f8a37ebdadb623d981534009654","sha1":"ccb2c68dc73daee175820be9389ebc406e82f3e0","sha256":"70280b2ee3be0fe28e0df6ecaa221ef89b7324657da8fb91b5151570375df719","sha512":"e5c3f47e0c7f4d7065434c89c52fda12fa691abc02eb53193b0b6b18359c744a0f5c13945429f33c7a6218a1c9d4310eea23ec70e3be1f72d6180b7f0e84550e","ssdeep":"24576:Ajd+2yh02IL6Ln5F9MSqvkFsv2eQW9gsgDQPAi8JmxEb7uYKJpuCcyN:H2IjbpjmxH","tlshash":"ab258d25ff02dfc11c7b2e14cbc31f4e8b8ab84a2cb8d86d54b21545d9ea7492a4f25d","first_seen":"2026-05-02T12:47:20.341787Z","last_seen":"2026-05-02T15:32:07.779545Z","times_seen":3,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":79,"dns":29,"connect":1,"send":0,"wait":97,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/usdc-174196f9.svg","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /usdc-174196f9.svg HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e256-87c\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fe128c7103fe60b1fe6a53e0ae04511","sha1":"a6e2f8cda7077686584ac7bdbd789e84defcaa1a","sha256":"174196f91a7e1e42b85f80e926b2505cc502826e3ed9ad37ee27fcf5cc54648b","sha512":"c5b6044f761d5eea88cab19fb403da041f55edcda8d9b4c86fcb32a76f68805da354d7ed6255265b0c4ca77b33ee7975b337040f7af517741ed25560f9929f70","ssdeep":"","tlshash":"5a411ee057ece1f5f606f7118121a5213a9b20f9be25cf818760aff8ab1187f655dc84","first_seen":"2026-05-02T12:47:20.345756Z","last_seen":"2026-05-11T18:23:33.613922Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/index_2.html","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 15 Mar 2026 16:46:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e253-12c\"\r\nexpires: Thu, 29 Oct 2026 12:46:47 GMT\r\ncache-control: max-age=15552000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b3cb4073d87581163693d72c010dc5f9","sha1":"9a6dc06840199066c3165be13cfed45601cc13a6","sha256":"daaf5c2b889bf52c805ca06168ce90bbc874c66aa5522d7a481d52f757cf39bb","sha512":"d38518545d89e93d0d8d9308b1fb5a331f19eb1732a512a233cd5429515f16b0af503e55e3f9f5a580ce2dc1903b47a002904dbd986be8711ccc27ace6cac6f0","ssdeep":"","tlshash":"84e072ebc22200002a40ab404ac2b4100c8abb5eb5018f69ae6370b8a8ae2b1d023344","first_seen":"2026-05-02T12:47:20.348575Z","last_seen":"2026-05-11T18:23:33.575176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/index_1.html","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 15 Mar 2026 16:46:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e255-f7\"\r\nexpires: Thu, 29 Oct 2026 12:46:47 GMT\r\ncache-control: max-age=15552000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"3d6440a417cd2495bebd9a61e98400f3","sha1":"c86e62882a76d3e577cd82a3db9e35930e296dc2","sha256":"878e41d7b8ab21135bea244b15546e7ac47bd8cf0e5f581fdb91e34602468a3e","sha512":"56e0126915a0ecc5dc32ab9b9066cc2d3b27fc5bcb4aeb7cf590a386c2b2b63b1e1062059fc0c263a61ca8cdfba03dead7d97904c5393956604da72227637708","ssdeep":"","tlshash":"08d09712c805892fac0246a0cb63f380c481872dec31ac30ecf17a30e28d6248a22189","first_seen":"2026-05-02T12:47:20.310182Z","last_seen":"2026-05-11T18:23:33.591047Z","times_seen":8,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"across.to.bridge-and-swap.to/Barlow-Regular.woff2","fqdn":"across.to.bridge-and-swap.to","domain":"bridge-and-swap.to","tld":"to"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:47.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.across.to.bridge-and-swap.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 08:56:12 GMT","end":"Thu, 30 Jul 2026 08:56:11 GMT"},"fingerprint":{"sha1":"D6:DA:3C:53:40:94:E2:B1:F9:B7:3C:38:85:30:C7:2F:A6:51:F3:D1","sha256":"FB:39:46:1F:89:62:DE:33:4F:3C:6B:3E:48:6B:81:82:34:11:21:72:AE:9B:7B:06:5C:E5:42:E2:99:48:2A:22"}}},"request":{"raw":"GET /Barlow-Regular.woff2 HTTP/1.1\r\nHost: across.to.bridge-and-swap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 12:46:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14036\r\nlast-modified: Sun, 15 Mar 2026 16:46:12 GMT\r\netag: \"69b6e254-36d4\"\r\nexpires: Sun, 02 May 2027 12:46:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14036,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14036, version 1.0","md5":"d003a09026cb3ac99be896ec83df4bcc","sha1":"e5da7bb2e5012469a0f43e8d87f046264432ff9d","sha256":"15b7ba238dc0b8e0c6ea63409a42d8b6fa68475cbc3a8d80388d6bae7beb833d","sha512":"0901ee607b5a08ed0ea04116c9b83f273790769c9c8404d2a7b8138de87b52232ba9f6c70f6a23a9198c2ee8c735b885e476c5de8694ffcddce1f20666e3db1b","ssdeep":"384:D2y414GSk33gqy4ToR7gBf9DaXrgnRuE8f5cu6:DJ414MHr9ToxYJ8rgnRu5BB6","tlshash":"7c52bfa477c9f073f17235b9207297efea4df205a286827d4101d28b66340e87d955bf","first_seen":"2023-05-11T20:02:23Z","last_seen":"2026-05-11T18:23:33.605977Z","times_seen":27,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"across.to.bridge-and-swap.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preview.testnet.across.to/logo-small.png","fqdn":"preview.testnet.across.to","domain":"across.to","tld":"to"},"ip":{"addr":"172.67.70.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://across.to.bridge-and-swap.to/","date":"2026-05-02T12:46:48.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"preview.testnet.across.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 20:20:40 GMT","end":"Thu, 11 Jun 2026 21:20:39 GMT"},"fingerprint":{"sha1":"F3:92:27:12:7D:5D:7C:FE:E8:2E:2E:D8:66:DE:DA:25:10:C0:3B:FE","sha256":"C5:51:0B:0A:1A:07:69:0C:A2:AB:4B:78:A9:CF:4D:0F:83:1D:AB:2A:20:4F:D6:14:96:20:C4:8E:A1:35:3E:63"}}},"request":{"raw":"GET /logo-small.png HTTP/1.1\r\nHost: preview.testnet.across.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://across.to.bridge-and-swap.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 12:46:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 349215\r\naccept-ranges: bytes\r\naccess-control-allow-headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-origin: *\r\nage: 99061\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-small.png\"\r\ncontent-security-policy-report-only: default-src 'self' *.across.to across.to wss://api.blocknative.com; font-src 'self' fonts.gstatic.com assets.vercel.com data:; img-src 'self' *.walletconnect.com assets.vercel.com data:; connect-src wss://*.walletconnect.com *.walletconnect.com wss://api.blocknative.com mainnet.infura.io *.across.to across.to *.wallet.coinbase.com *.alchemy.com *.infura.io api2.amplitude.com *.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' platform.twitter.com vercel.live; style-src 'self' 'unsafe-inline'; frame-src 'self' vercel.live platform.twitter.com *.walletconnect.com; frame-ancestors 'self'; report-uri https://umaproject.uriports.com/reports/report; report-to default\r\netag: \"54ff805fb704e93cc9f35f7c552147db\"\r\nlast-modified: Fri, 01 May 2026 09:15:47 GMT\r\nnel: {\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.5}\r\npermissions-policy: geolocation=(self), microphone=(), camera=()\r\nreferrer-policy: strict-origin\r\nreport-to: {\"group\":\"default\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://umaproject.uriports.com/reports\"}],\"include_subdomains\":false}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vj2mx-1777726008358-f1408ed9e3cc\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\ncf-ray: 9f57217ffa3a783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":349215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"54ff805fb704e93cc9f35f7c552147db","sha1":"23e3b153ce3f8f0d9eb9ac337658f08d50cd3c5d","sha256":"b231cd23640c030c802bf3521b156f59b5e525f40ebab28b590043c9595d909f","sha512":"fd0b44016240d51b5f11777674042802f2c598fce7ede389025cc1580c022b517cfd5d78e8ac16a9083658f090577c168c705fd892a6089bb75e0654811a7c0f","ssdeep":"6144:ILpunpcSfg6+OLl8mFl61n2l/O7nc5GwTgwzS7Z5WKfN3BU2m8zl2XQa:ILHGnFlEG/O78G2gwzCx13+z8z8Aa","tlshash":"2a747bd17cac7dab8b8463cc2f23e64d8343669c236794d73538b50b29c1a8d6db1867","first_seen":"2024-08-20T15:06:20.181487Z","last_seen":"2026-05-11T18:23:33.576847Z","times_seen":8,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":71,"receive":22,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}