{"report_id":"fc14f442-8c5d-4f86-98ec-aea885b95217","version":0,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-08-31T07:37:54Z","url":{"schema":"http","addr":"appkyber-swap.com/","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"appkyber-swap.com/swap.htm","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"title":"KyberSwap - Limitless Access To DeFi","dom":{"size":224723,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23000)","md5":"b2b5e04a4487b3907dfffed702b29606","sha1":"21f79cdc901fea78e12c907ac1e5b503c2481acc","sha256":"de7e43a7797e760d8e4489ee9c110b713ccc1610325614881aff26fd250dd3fc","sha512":"9234b5f55759c1d09f285f3c1e4c0ee92666f325571a82ac40109b6a81e614291aa99254db64cfd8a6feca96d853ba20d76f930fb5119a38f901a4e2d1251a15","ssdeep":"3072:GPv396mO9RUqJ0z6gvjMfpyPk57K5X6YR:GQmkUZz6gvjMfg5B","tlshash":"3d243cf1a390a0febc2b47b5e225fd6c720664b6ef714bc8f1b8969047c1eda4c16950","dom_hash":"domhash6caacbfad62d146133cd153ba7fc92ec","first_seen":"2026-07-10T09:06:31.090365Z","last_seen":"2026-08-31T07:38:08.143754Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"appkyber-swap.com/","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:37:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-08-27T01:26:18.427112Z","alert_count":0,"request_count":1,"received_data":973,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":25420,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"appkyber-swap.com","ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":40,"request_count":20,"received_data":8858819,"sent_data":10290,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":1,"received_data":1185676,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kyberswap.com","ip":{"addr":"172.66.170.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-19","domain_rank":94500,"first_seen":"2019-02-01T06:32:22Z","last_seen":"2026-08-06T21:40:40.21867Z","alert_count":0,"request_count":1,"received_data":19532,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fyrion.org","ip":{"addr":"172.67.178.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-29","domain_rank":0,"first_seen":"2026-08-31T07:38:01.44064Z","last_seen":"2026-08-31T07:38:01.44064Z","alert_count":0,"request_count":4,"received_data":113806,"sent_data":2144,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"appkyber-swap.com/assets/w-modal.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-31T07:38:08.163677Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/w-loader.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-31T07:38:08.178412Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/modules.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-08-31T07:38:08.195199Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/main.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dee68217b6eb5e2c916cc6b368c3cd6","sha1":"3353bdd7f208de0e6080e784c2bc4a85dd15833b","sha256":"794553b2bbd90f3df0a9103ee54614c967d42cd78a04506011eb46222827166a","sha512":"728a3e68dd2beb176bbc67553c0b2164b81a509f05d911f7f9fcc43594db1bc7a93434c2b93620aba8818ff18a492dbf8ec91b4d35dfc608829f8f7512a6c6f2","ssdeep":"3072:6ZW4lfperg28wOX8H2rjmcFVR7IrB+604XJUNFn:6Zperg2DH2rhFhF","tlshash":"3b44c79865fb443c805b346d5a5f61007834f287708cddb53abd8921afcdda4cae2bad","size":277149,"data":"","first_seen":"2026-08-31T07:34:52.102474Z","last_seen":"2026-08-31T07:38:08.154338Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.10.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e131238273584c83b0089668cf50b1c","sha1":"a0e353e006c1ce398cc28b065c9e2754f9f6d655","sha256":"8cdcd2aa68c68480d5180ca0cd64f190c7064fdecff596ea34042eba5ff181db","sha512":"1179354c1ad3d530be6a372bf1cf8c71584616fe31008fbc9be57b4f83f04f731d600bf8ee3922ae57934d987c205b51bfdd19b4a3ce93fe09253194690f5de9","ssdeep":"6144:O/QrM70NNb2ki3aT9lWCNvmsIAAvkNS98bKwTlC1wr5ndZYTXLpg3jvLJvyzzWaO:OIrM7xkr/WamsIbcvbKunDYn6vU8","tlshash":"0c45f9c47691b095c3a25ad1446fd00ae33dfd647c8c4169bb57ecf32ca8a89512bf3a","size":1184878,"data":"","first_seen":"2023-05-12T17:02:00Z","last_seen":"2026-08-31T07:38:08.200036Z","times_seen":461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-31T10:28:38.235519Z","times_seen":428382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"NetworkError when attempting to fetch resource.","filename":"https://appkyber-swap.com/assets/main.js","line_number":99,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"appkyber-swap.com/images/image_2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2.svg","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.429Z","timestamp":1788161835429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /images/image_2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2.svg HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: W/\"6a5758c5-1d79\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FSchfoZYBImL572Seg%2FSsGo5T%2BEcT2d3t9IQaphzIIFgj55dkPT0vfKbCSiwsY0e5HqnrdeLiBGUG3GaVltDhl%2F4TRhsYwu%2BCXuY6gW79%2B%2FX7lf50bZXu5dn%2F33%2ByFFzIah5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f7c1475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7545,"size_decoded":3038,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2dda438a79618571ba17f8259517a1ef","sha1":"2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2","sha256":"4f69185e7a28cdf58cfb0ae430f34ae8622a18b31d35b414d3b9d48d6a223a05","sha512":"ee87ec6f82e01d76fcbafc3a3ae36dbd4e9f8e19b4257ca46d47d0d68677dad83a3ee8b62242ead7373c82c873919141a2a923800d0b5ade775d56b0a10b00f2","ssdeep":"96:gAkFjsfuvjgOApylYgAmEoUGt9JbCJ4T9xqe0RJCa/MGCsalEMxhH5H:zkFsavS7Gt9xsZEGCsWV5","tlshash":"36f162e183fc6ad4f01497ccf755307874156aab5f4146a8f53d0fe8a7820aa887f8c9","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-08-31T08:37:24.214216Z","times_seen":35,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.10.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.402Z","timestamp":1788161835402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/web3@1.10.0/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.10.0\r\nx-jsd-version-type: version\r\netag: W/\"12146e-oONT4AbBzjmMwosGXJ4nVPn21lU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2765128\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\nx-served-by: cache-fra-eddf8230188-FRA, cache-bma-essb1270030-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 306235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1184878,"size_decoded":307033,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"d37b2a59a14a61b87878e711a84b61b8","sha1":"6cfc4156cfc57c1b80575c0500ff23a8ebaf138f","sha256":"b373e98462cf00b9307cb622f54dd317f4d6d607bb222edba86f9e6dc9e53fd2","sha512":"2bb491e0f551d18163e56b01dee786e0a5a897952476da5d69bb1389fd567002d6a28270ee807abf58781cd4afe3e66b65a2389f26c2f379cd6e9cc2e77dc894","ssdeep":"6144:O/QrM70NNb2ki3aT9lWCNvmsIAAvkNS98bKwTlC1wr5ndZYTXLpg3jvLJvyzzY:OIrM7xkr/WamsIbcvbKunDYnk","tlshash":"9625e9d47291b065c2a25ed5402fd00ae33dfd687c4c5169bb17ecf72ca8a89512bf3a","first_seen":"2025-08-07T13:48:42.705858Z","last_seen":"2026-08-31T07:38:08.14828Z","times_seen":85,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":14,"receive":32,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/images/image_64ad3822e72417845dd513f5c37f061afb1c19e9.svg","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.430Z","timestamp":1788161835430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /images/image_64ad3822e72417845dd513f5c37f061afb1c19e9.svg HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5758c5-41a\"\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHsNXFsW%2FsT%2FvSAn%2FvDBkseF%2BpCes%2BDDWjWcB3%2FfPFFO8mL%2FRN1dr9pcUg6p5iFZi6VsTUuq4ZDn6lZbzAAICNjurlSiyEbbs1gXLEGnL%2FAShXM55wRwQKJs0aU5y%2BDuPW07lQ%3D%3D\"}]}\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a33a5e6f7c1575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1050,"size_decoded":1328,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cc37b6f6f1a4d6929b08daf7e4c9918","sha1":"64ad3822e72417845dd513f5c37f061afb1c19e9","sha256":"ccc0d6bf9db586a5b6d1a8c2c73b9f2bd8ea133b5674ca661c58ec0e04ed536c","sha512":"41e0323444c4f02e4b4da438f1245bc589f2dc6e951f7a349c798c3b3f35670da5c9e67fc3838746d33e631174ae43b3ab89b7210b88ab313585da44f954a148","ssdeep":"","tlshash":"f411929ad7a75b34755a4210cb74a5303ba264bf5020f6983eef6620bf159b0508617e","first_seen":"2025-09-26T20:57:34.681272Z","last_seen":"2026-08-31T08:37:24.180972Z","times_seen":10,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswap.com/favicon.png?version=v1","fqdn":"kyberswap.com","domain":"kyberswap.com","tld":"com"},"ip":{"addr":"172.66.170.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{6ab82044-2d5b-4dee-bb44-77f64fbd656a}?https://appkyber-swap.com","date":"2026-08-31T07:37:15.867Z","timestamp":1788161835867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 01:43:58 GMT","end":"Sun, 18 Oct 2026 02:43:55 GMT"},"fingerprint":{"sha1":"97:0A:BE:BC:C2:0C:AB:3E:87:7D:0B:BD:E6:58:3E:E1:A9:FD:62:D8","sha256":"4B:C6:D3:A9:4A:FA:F9:95:F9:8D:EE:3A:1E:20:A0:6F:33:0A:CD:28:62:C4:ED:16:14:59:50:5E:27:DE:F5:8C"}}},"request":{"raw":"GET /favicon.png?version=v1 HTTP/1.1\r\nHost: kyberswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 18934\r\ncf-ray: a33a5e724e0eb509-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 778460\r\ncache-control: public, max-age=2592000\r\netag: \"6a887fcf-49f6\"\r\nexpires: Mon, 21 Sep 2026 07:22:55 GMT\r\nlast-modified: Fri, 21 Aug 2026 16:41:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 0\r\nx-frame-options: sameorigin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18934,"size_decoded":19532,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"a5a0046ac66ed0ed6e957d4c88f87648","sha1":"8f1ce4fb1da9ef674ee7bd20f823b2d48c3c7f95","sha256":"b414fc61c811fe626f62527a7a204f890a70168c41d50650b88341e6eeb9dbb7","sha512":"477416f4649b76326256541d1d6d07fddbad8f5625bdd2531a0ba32ed8fdb89eef6d79d11ad6a6ab8305c23835cd0c71128076a9a44ed2098181d509052f9130","ssdeep":"384:vgJnTYlzID3ZGhANM7r9MJciu2b2xKFOeSAcsLFw8688/zdZNTp7gL5:IJx2ry42XFOlAvF68Yz7m","tlshash":"16826cb9ef4098fca499e050f8c5570f6ba338934392a083f97b0d5a45a3ff705622a1","first_seen":"2025-05-26T12:25:42.262827Z","last_seen":"2026-08-31T07:38:08.151182Z","times_seen":31,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":40,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fyrion.org/","fqdn":"fyrion.org","domain":"fyrion.org","tld":"org"},"ip":{"addr":"172.67.178.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:16.741Z","timestamp":1788161836741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fyrion.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 05:02:09 GMT","end":"Wed, 21 Oct 2026 05:59:24 GMT"},"fingerprint":{"sha1":"DB:7F:7D:30:CC:9A:56:97:CC:EF:73:1C:9D:64:0F:F1:BB:DE:39:97","sha256":"3A:6A:B8:FD:CC:A5:D3:20:6E:43:1E:75:FC:8B:D4:B1:F5:0B:13:8F:DD:D8:2A:6B:61:3D:82:67:C0:D1:7E:F1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: fyrion.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appkyber-swap.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1521\r\nOrigin: https://appkyber-swap.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1521,"data":"v=20012026\u0026s=1\u0026r=736f5c7e4f2544667424227f597f5c6f4c4e446f774140244c402f7c7424237b7741757f5a555c7d7424277e7741227f597f5c7e755e546473415c7a757f276c722450615a7b586074455f655f787260757b627a757a2f664c555f20747840657455617f724e587a757a2f664c555f205f7c53225b6c477f5a555c624c4e586c4f41727a4e25446c5f7c796e586c71225b424f6e59525b24586c5b225a555c7c775150264e24447e7251537f5978657f4c4123264c4e5c707224407f75247a264c455f205f7f5f655f7b6e7a4f4e4c7a4e25727a4f7858667251437f597f5f7f5a555c7c742423634c4158264e2558274f24587a75255b7f597f5f625b4257615b6c716f585275265942752458555f655f7b5860747b237a4f254470757b406e7241406c72555f205f7f5f655f7b5860747b237a4f2544704f2450634f2440655f7c797f5f7f617f4f4e5461757b2f244c402f6f4c4e50274c4e58265f7c797f5f7f617f4f4e5461757b2f244c402f6c7241587c4c4e586c5f7c797f5a4253615b525b225b7c472558527d25587c477f5a555c7e755e546f74254c7a4e24587e747b587a74555f205f7f5f655f78547a757b276672502f6c774172634e24447e7251537f597f5f7f5a555c26757b506375244c7a757a2f6f4c4e50274c4e58265f7c797f5f7f617f725e5c7e7478587b4c4e5c707525407c4f24406c756f5f205f7f5f655f78446f4f41236c4c7b406f4e24587e747b587a74555f205f7f5f655f7858664c242370757b406e7241406c72555f205f7f5f655f7858664c2423707525407c4f24406c756f5f205f7f5f655f7858664c2423704f2450634f2440655f7c797f5f7f617f4f247e7e77412370757b406e7241406c72555f205f7f5f655f7b58794f417a634e2558274f24587a75255b7f597f5f7f5a555c7c77515066747a2f7c4f41237c4c41617f597f5f7f7045617f72245065745140264e24507d4c5e5c7a75255b7f597b2327745161655f78547e757844634c4e5c704f41447d757b406c756f5f204c7b50657524402f"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"bfd8-H9BN9oLDpK/JT1YZ6utRdrAVwb0\"\r\ndate: Mon, 31 Aug 2026 07:37:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzBA%2BoRqtFRSFxAWQq4dau5SQUFT1%2B5WiV2u10INFkevCEuJU9By7VI%2BHhGYm0s8O9dbSbKyDCaef7LvSxuqHltmgDlaR24QemA9t7%2FOFiupe11yFLQae2IIIH62\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33a5e77ab96b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":49112,"size_decoded":12885,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (49112), with no line terminators","md5":"a5204419e97a3927bf15f857438c8d1c","sha1":"1fd04df682c3a4afc94f5619eaeb5176b015c1bd","sha256":"f4d758899b0d105cdfb1ad0fbe7d1e72dc6878881b63a59db8497fb09794bdbe","sha512":"39aaa93b181df4e484519e213ae442cc1d53ea19a6aacbdbd90170065dd7921221096b0674fd980ce981ce6b81c69f3c21da274cecffb25040a2ee4a2732c0b4","ssdeep":"768:4jNNjLjm3t7tU9+kfDFVcL4Viz8+Hr7XSb/g/pcNhCLRT9dBddrRPgid:4jNNjLjmkIkfD4LuizP4/gxc2vvdrNd","tlshash":"742310f0774ced82942d06fb302df98d3036c94b8adea5dc94b8b5c616a9f21ee1e441","first_seen":"2026-08-31T07:34:52.078224Z","last_seen":"2026-08-31T07:38:08.152356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/main.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.411Z","timestamp":1788161835411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: W/\"6a5758c5-43d33\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGcDWUCGFJOv%2B25DClz6fQVfqipUtkkd%2FOMde4gDOquxX3UT3Uc4oBMrWa7z60pVzQMiW5DJ5QqsGpAket8OEFimKGygbP3gddBZP%2FL7u0ikRwHRbBb9qZUtjSDEMpBaF%2BWiWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f5c0e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277811,"size_decoded":35343,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (4614)","md5":"5dee68217b6eb5e2c916cc6b368c3cd6","sha1":"3353bdd7f208de0e6080e784c2bc4a85dd15833b","sha256":"794553b2bbd90f3df0a9103ee54614c967d42cd78a04506011eb46222827166a","sha512":"728a3e68dd2beb176bbc67553c0b2164b81a509f05d911f7f9fcc43594db1bc7a93434c2b93620aba8818ff18a492dbf8ec91b4d35dfc608829f8f7512a6c6f2","ssdeep":"3072:6ZW4lfperg28wOX8H2rjmcFVR7IrB+604XJUNFn:6Zperg2DH2rhFhF","tlshash":"3b44c79865fb443c805b346d5a5f61007834f287708cddb53abd8921afcdda4cae2bad","first_seen":"2026-08-31T07:34:52.102474Z","last_seen":"2026-08-31T07:38:08.154338Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/ethereum-989041d8.svg","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.802Z","timestamp":1788161835802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /assets/ethereum-989041d8.svg HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=461\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtYdphd7qfhGCFwewDiTHzOr4A%2BVHdh9YHr3qXui9%2FV8T6tvX%2BuovmFRu1RdSWr7cPLCmjHwF6lXrl7CHV%2BQziJWM%2BHuLGibkua1dzxsxV3x0AYdOB0q2G8AZLHsTqHVJv0bUQ%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e71cc4975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3812,"size_decoded":2128,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"93a5c5dfbe4d163cc191c1b139ddd356","sha1":"77a92e094cfdc24341d75ff1de75643820f2f2ae","sha256":"a4f2522a3f2d7f415a5f2349d01755816f5522d046356743cfdbe1673304edbf","sha512":"1f26effef031f6e6c8dddd9dabfcb334c5ea9090377eb081a39d6f935822c99ca1aff0c13f9bcbb9e59e37de56921e75877f8990737eb318d0761ca1533c037a","ssdeep":"","tlshash":"a171329b06eb811d6023916f3b9d7301b8a2863bd75bfc253d4e8358afcd44a40e279c","first_seen":"2026-01-18T10:52:03.855468Z","last_seen":"2026-08-31T07:38:08.156063Z","times_seen":132,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.844Z","timestamp":1788161835844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: \"6a5758c5-c48c\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZBaiWWHqJ33jqE%2FOMRTgjdmTdhJhpodhmhz0HKQF68wIgK6KCfriMI%2FuOA1vaxPHe3TUQcX7O3h3keYzpYCmCu5f06j6Flgwtnz8HTnWU9vPto0XWjEbGLEJhfZLIoMqD2OtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e720c4d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51060,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-08-31T10:00:38.515333Z","times_seen":24323,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fyrion.org/","fqdn":"fyrion.org","domain":"fyrion.org","tld":"org"},"ip":{"addr":"172.67.178.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:16.502Z","timestamp":1788161836502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fyrion.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 05:02:09 GMT","end":"Wed, 21 Oct 2026 05:59:24 GMT"},"fingerprint":{"sha1":"DB:7F:7D:30:CC:9A:56:97:CC:EF:73:1C:9D:64:0F:F1:BB:DE:39:97","sha256":"3A:6A:B8:FD:CC:A5:D3:20:6E:43:1E:75:FC:8B:D4:B1:F5:0B:13:8F:DD:D8:2A:6B:61:3D:82:67:C0:D1:7E:F1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: fyrion.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appkyber-swap.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1505\r\nOrigin: https://appkyber-swap.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1505,"data":"v=20012026\u0026s=1\u0026r=736f5c7e4f2544667424227f597f5c6f4c4e446f774140244c402f664c555f655f7b446074415066747f5f205f7b5061755162234f7b406f5a4e58254f4e57634f242f625f7f617f72242f6f7724406f4e247a7d5f7c666372416e655a555c277524406f4e247a7d5f7c666372416e655a555c624c4e586c4f41727a4e25446c5f7c796e586c71225b424f6e59525b2458527d255a555c7c775150264e24447e7251537f5978657f4c4123264c4e5c707224407f75247a264c455f205f7f5f655f7b6e7a4f4e4c7a4e25727a4f7858667251437f597f5f7f5a555c7c742423634c4158264e2558274f24587a75255b7f597f5f625b4257615b6c716f585275265942752458555f655f7b5860747b237a4f254470757b406e7241406c72555f205f7f5f655f7b5860747b237a4f2544704f2450634f2440655f7c797f5f7f617f4f4e5461757b2f244c402f6f4c4e50274c4e58265f7c797f5f7f617f4f4e5461757b2f244c402f6c7241587c4c4e586c5f7c797f5a4253615b525b225b7c472558527d25587c477f5a555c7e755e546f74254c7a4e24587e747b587a74555f205f7f5f655f78547a757b276672502f6c774172634e24447e7251537f597f5f7f5a555c26757b506375244c7a757a2f6f4c4e50274c4e58265f7c797f5f7f617f725e5c7e7478587b4c4e5c707525407c4f24406c756f5f205f7f5f655f78446f4f41236c4c7b406f4e24587e747b587a74555f205f7f5f655f7858664c242370757b406e7241406c72555f205f7f5f655f7858664c2423707525407c4f24406c756f5f205f7f5f655f7858664c2423704f2450634f2440655f7c797f5f7f617f4f247e7e77412370757b406e7241406c72555f205f7f5f655f7b58794f417a634e2558274f24587a75255b7f597f5f7f5a555c7c77515066747a2f7c4f41237c4c41617f597f5f7f7045617f72245065745140264e24507d4c5e5c7a75255b7f597b2327745161655f78547e757844634c4e5c704f41447d757b406c756f5f204c7b50657524402f"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"48-KO0a3gXmA+higr3q3ELViG6db9Q\"\r\ndate: Mon, 31 Aug 2026 07:37:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqyjZul%2B24mTWqNDsfhU7NJe0EihDxFGeoxjty3WYWRXeDNI9B8ut4akoP2kLaJcDGV30JhCrtAm%2Fusln%2F1s7%2BvjSMWMCtdph6zlcp3T5wO8qG1BounaXiRv2rEQ\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33a5e76cb5eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":760,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"44901850b93c222e8673b60fa249a3ce","sha1":"28ed1ade05e603e86282bdeadc42d5886e9d6fd4","sha256":"4aca55f2151217a94d96f67f7dacd441c153ce35bbf4ea4c0cc3e92a49eaa0ca","sha512":"3532a3fcaa00504f24d45300e81eb0eb4e5a0a4166c10dbe1aa8c5d11256b093e2ec31c98e2f3e9ee69c6e1e665cc17838eeeb00b6947bb8b80104e8e14a4859","ssdeep":"","tlshash":"3fa022e0333f0000c00022a8bf388ae83e30e002880e080af8fc30020e08303020a202","first_seen":"2026-08-31T07:38:08.158225Z","last_seen":"2026-08-31T07:38:08.158225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":84,"dns":0,"connect":17,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/images/image_3859a6d4755469903cf599858048e73283f69246.ico","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:16.477Z","timestamp":1788161836477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /images/image_3859a6d4755469903cf599858048e73283f69246.ico HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:16 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a5758c5-3aee\"\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LT8a6vFRu3RwutzlQjTExEEcfTJsVOOFwRx8cOvVhL1bDak7vtYEGkx4rABHz0yCkvlcxw15Dp6kIpKW78jYMNqpAMovgrn38I0%2F4Bm%2B%2FBNShFAI0ecaLOgxtbFsEt7V6xdBFA%3D%3D\"}]}\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a33a5e75fc8675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":3098,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"4973bd611d08de1b60cd91c586bb8b07","sha1":"3859a6d4755469903cf599858048e73283f69246","sha256":"f6d7868c3585b58b5c51155c396df140072956434e19103f9eb9d8ec7cd1d4ae","sha512":"50e06e2f0270816ed291d1000432cfcd66edc61113b2b8e94f589086a7ffd8bb5edd18da5f1f64e67a5de5b795d1f25ab0ac4dd43fdaa9773deac892619cd3ae","ssdeep":"192:jZPTVFDCLcy/5rViXKn1DNOfhrVh6ys8T:jby/51a37","tlshash":"b462fde49f52f4b4c8890570ec6409828e393cfba964741506e87fc33ab26a5fccb975","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-08-31T07:38:08.161063Z","times_seen":48,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fyrion.org/","fqdn":"fyrion.org","domain":"fyrion.org","tld":"org"},"ip":{"addr":"172.67.178.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:17.075Z","timestamp":1788161837075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fyrion.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 05:02:09 GMT","end":"Wed, 21 Oct 2026 05:59:24 GMT"},"fingerprint":{"sha1":"DB:7F:7D:30:CC:9A:56:97:CC:EF:73:1C:9D:64:0F:F1:BB:DE:39:97","sha256":"3A:6A:B8:FD:CC:A5:D3:20:6E:43:1E:75:FC:8B:D4:B1:F5:0B:13:8F:DD:D8:2A:6B:61:3D:82:67:C0:D1:7E:F1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: fyrion.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appkyber-swap.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1529\r\nOrigin: https://appkyber-swap.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1529,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"f1a8-tdbo5ZjPsTaZQrDe1QRxbEh9b1I\"\r\ndate: Mon, 31 Aug 2026 07:37:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qp7QWbTiguqBPqJx4qBnzawOFdHCGGvji8bGhENtYE6mr8JwE00Y7JMi70e%2FjomrrG7YMO%2FnNZxIP%2B%2FnVi4eoPXiBsWLaO97ECemdSFcVrqKmuwxk1q4c%2F6JvADC\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33a5e79bbcab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61864,"size_decoded":5209,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61864), with no line terminators","md5":"1cd7f951c5f66b15d5f983268ecb080d","sha1":"b5d6e8e598cfb1369942b0ded504716c487d6f52","sha256":"5ed3bf9cc3caa64ed49b7ec24bfb0ce0294640e6072cfb71fd7d7bbeddd0815a","sha512":"f411fce42ee391fc9eb4447548f69e43742a6e175f5c989eca1dc866d108bc8035b9036473724ce65fb2a720802431516dc37b6abaec2bca48ce887eb778558b","ssdeep":"1536:tkpkvkok1dkwf+AkDkPFkbkNkPkekNWvkEk6lbkjk/DkWgUe5rkWq/PkWM86kWfb:C","tlshash":"425337b0b731ad82a16c24fb743ff3897a30e016e5dc95ac9cac72d71875223971a719","first_seen":"2026-08-31T07:34:52.052375Z","last_seen":"2026-08-31T07:38:08.162082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/w-modal.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.407Z","timestamp":1788161835407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: W/\"6a5758c5-9307\"\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\ncontent-encoding: br\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqXV54CnmDWzeC623oj4jba%2B7Lesf%2BMV7fjUpg1gg3ViiQm0GA1WJ8ok6dPAgw1EEcfRJjB27hHwDqhChFJSXo%2FE%2F1W1lQULUKydA6Qw1w0BeSuBu%2FOlGarKVmIEm0heV6pe3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f4c0675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":11206,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-31T07:38:08.163677Z","times_seen":214,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/modules.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.410Z","timestamp":1788161835410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: W/\"6a5758c5-5d1a20\"\r\nx-ray: wnp68428:0.028/wn68428:0.000/\r\ncontent-encoding: br\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E49JDDoT6Vd%2Fnc1bz7AEI8rMlzqdR65owjF7k4pD3mJQsCu0xMyYQTnIYfjNBEbGd99WuPWYweY0pvFF4lN1hPnMVRZED65eq6stKHhU0YNRyTuhD34EViqVTgDFQLGwl0NRQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f5c0c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":1880972,"mime_type":"application/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-08-31T11:04:09.267744Z","times_seen":176,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/ethereum-989041d8.svg","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.418Z","timestamp":1788161835418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /assets/ethereum-989041d8.svg HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=461\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXfnZ0mEBd5REmk15q6LoMle1%2BhSPydJ0U2WTiHn402GuLUKwYf9ixA%2Bkb4oRIOVPycet5%2BhhCzY%2FtqTcqo7UGVcTAlSsyupJTwpGG0VP%2FbKEULMa7QoaANtpgkdhBN%2FLqEY4A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f5c1075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3812,"size_decoded":2126,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"93a5c5dfbe4d163cc191c1b139ddd356","sha1":"77a92e094cfdc24341d75ff1de75643820f2f2ae","sha256":"a4f2522a3f2d7f415a5f2349d01755816f5522d046356743cfdbe1673304edbf","sha512":"1f26effef031f6e6c8dddd9dabfcb334c5ea9090377eb081a39d6f935822c99ca1aff0c13f9bcbb9e59e37de56921e75877f8990737eb318d0761ca1533c037a","ssdeep":"","tlshash":"a171329b06eb811d6023916f3b9d7301b8a2863bd75bfc253d4e8358afcd44a40e279c","first_seen":"2026-01-18T10:52:03.855468Z","last_seen":"2026-08-31T07:38:08.156063Z","times_seen":132,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/images/image_f9a89309caff2f438ad6bd931392e1dcf52d3172.png","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.421Z","timestamp":1788161835421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /images/image_f9a89309caff2f438ad6bd931392e1dcf52d3172.png HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: \"6a5758c5-191120\"\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4FncoSS4wN1vqZbSRb31EBmTKfK9MmHx24x4P08N%2Fkmm8IE82QE7dMC7n%2BE1pvhdtdTIESTq4gn%2BUH0P8pu8HPsSzEkzIvJWq%2BlmsA3MZxlPnKq2HAN49b5TZluMVbsnZWCbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f6c1175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1642784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642784,"size_decoded":1643532,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"e52b0ef49b19bef04b18ca323b7a10bd","sha1":"2592f8ee91c3c91ce911dd5021a4e1decaa45bec","sha256":"0b90b8fec8136657159a2fb0c7e5f57d249468caad021953ea27e6fb991503c1","sha512":"e431ac06bc57ce317adef9da1cb4e2f2178f9a652e7a53f3eb37efdac2d7455f4d7980cf0bc504c92e3e5b9b15e7917138b21249699f92d30cb4da81192681e4","ssdeep":"24576:FqKwlW94c4u3VDCa706FNPIJWEoJ4sq3TTPP/B2Z1myIhY67:F1zxV50OIFoJXqv/o1tK","tlshash":"d82533464df8793bf08b757d2908c874e8da64c02fdad2c30416c8ba3a6dfa6546b7d1","first_seen":"2026-07-10T09:06:31.096953Z","last_seen":"2026-08-31T07:38:08.16632Z","times_seen":5,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:16.485Z","timestamp":1788161836485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 01:14:41 GMT","end":"Wed, 18 Nov 2026 02:14:37 GMT"},"fingerprint":{"sha1":"B9:AF:DE:4C:74:4C:4D:7C:9D:1C:C5:5F:A2:D7:5E:D2:22:11:41:C9","sha256":"FA:89:5F:37:B0:D9:87:3E:03:E6:D4:DD:CD:EB:B4:B5:55:50:5E:D5:9C:31:3F:75:C2:37:96:6A:D7:6B:96:12"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appkyber-swap.com/\r\nOrigin: https://appkyber-swap.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\ndate: Mon, 31 Aug 2026 07:37:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 273\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: __cf_bm=5rVyfAAYazVZ2vP7rBahVztgmCUN9xJnx3K8TM4A9sc-1788161836.5034833-1.0.1.1-3yCETw45gUg0ojikoyggXRDexv7EoczSFQAl_Y98.VLtwzr3G9OyfvLNqc4FuPqGfqfMTYJukqJ3VDNcbJkM3DpPyUr3plYU6jXkgQ6rRyjOz8au3buyMPtkAxDAtRxM; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Mon, 31 Aug 2026 08:07:16 GMT\r\nserver: cloudflare\r\ncf-ray: a33a5e762bebb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"5rVyfAAYazVZ2vP7rBahVztgmCUN9xJnx3K8TM4A9sc-1788161836.5034833-1.0.1.1-3yCETw45gUg0ojikoyggXRDexv7EoczSFQAl_Y98.VLtwzr3G9OyfvLNqc4FuPqGfqfMTYJukqJ3VDNcbJkM3DpPyUr3plYU6jXkgQ6rRyjOz8au3buyMPtkAxDAtRxM","quoted":false,"path":"/","domain":"cryptocompare.com","expires":"2026-08-31T08:07:16Z","raw_expires":"Mon, 31 Aug 2026 08:07:16 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=5rVyfAAYazVZ2vP7rBahVztgmCUN9xJnx3K8TM4A9sc-1788161836.5034833-1.0.1.1-3yCETw45gUg0ojikoyggXRDexv7EoczSFQAl_Y98.VLtwzr3G9OyfvLNqc4FuPqGfqfMTYJukqJ3VDNcbJkM3DpPyUr3plYU6jXkgQ6rRyjOz8au3buyMPtkAxDAtRxM; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Mon, 31 Aug 2026 08:07:16 GMT"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":273,"size_decoded":973,"mime_type":"application/json","magic":"JSON text data","md5":"817fe0f750fa91ac954b06a6e179f676","sha1":"651023a67e8786f8c7a63d323d81512687d851f1","sha256":"e54a34359ebeb4245031b742ee300e3fdd72ccf608d481d57caca1fc16147f17","sha512":"b6f4a24f4e9fd1ad99775fcfddc5311c09b8a77a3fc53798f1918b49fe87efcf1063aca6f4c9b63bb0d60d87d11bb5d0ff6223049f30b58d8013b642f33b6109","ssdeep":"","tlshash":"87d012f75585191b2b3743567068a8ace8d3888d99416447957d4364a28cd39128f21a","first_seen":"2026-06-09T22:35:40.080024Z","last_seen":"2026-08-31T07:38:08.167664Z","times_seen":112,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":46,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fyrion.org/","fqdn":"fyrion.org","domain":"fyrion.org","tld":"org"},"ip":{"addr":"172.67.178.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:17.273Z","timestamp":1788161837273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fyrion.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 05:02:09 GMT","end":"Wed, 21 Oct 2026 05:59:24 GMT"},"fingerprint":{"sha1":"DB:7F:7D:30:CC:9A:56:97:CC:EF:73:1C:9D:64:0F:F1:BB:DE:39:97","sha256":"3A:6A:B8:FD:CC:A5:D3:20:6E:43:1E:75:FC:8B:D4:B1:F5:0B:13:8F:DD:D8:2A:6B:61:3D:82:67:C0:D1:7E:F1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: fyrion.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appkyber-swap.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1601\r\nOrigin: https://appkyber-swap.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1601,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"28-kaP6c+QmmdYGaGA746x8o7sauxc\"\r\ndate: Mon, 31 Aug 2026 07:37:17 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7soHcuAQRePbp65xcv2qcEdxE976rP7go6pQDU364yi7LYmLWaXqu2K0gXcGmZX5AYN6dBrXfwaQpB%2FDhX5iTbswYFNRArIhx%2F%2BH6Ht73LhL9NGR3CFeVedJ71%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e7afbdab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":715,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1aa2f868fa329ac108ddfc73688555aa","sha1":"91a3fa73e42699d60668603be3ac7ca3bb1abb17","sha256":"c32aa563cb212dc4a43e7d88d7a7748973a01ad8fda7de160b0593be796a35a1","sha512":"f8a0dd8550a381122e2f855512c6e293eecdeafa93fdf7f5d9665e9afefd28cb2f034a54f0d1bb9b5a0a80e1387a9c6d529045d4746110cef841332eea2db0f5","ssdeep":"","tlshash":"4590045131374401054401d5f534d3f07c10d1014454050f7cfc70071d4410f1113301","first_seen":"2026-08-31T07:34:52.041589Z","last_seen":"2026-08-31T07:38:08.168637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:37:14.797Z","timestamp":1788161834797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=2143\r\nlocation: /swap.htm\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5QhWtLCK0cLbpjSN5RQJZdKQRI5fzCa7l%2BvkvqnygsYt3GMoUxBWdSlr5CdXEVqGiV6Qz0KSJI1UtGBBITUzrxA4ccaQPJTUGAgSFPAN%2FfBU2bEm37Z9Yuoqz45xi1AzLsYHHw%3D%3D\"}]}\r\ncf-ray: a33a5e6babdc75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T10:32:06.774868Z","times_seen":18200849,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":7,"connect":20,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/style.css","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.399Z","timestamp":1788161835399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: W/\"6a5758c5-30e5d\"\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\ncontent-encoding: br\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q968BgqOAOwM%2BHme1B5pnqWYOIakv07Es6Ebtxr5nLyCnSA7XAoj%2F5pUfGm31hvWYQtAicvjyKiET5kbf93ZIJm17GjKpkfQfF2n5QRHzb1oi86o1bBfi03W%2Bon1%2BNcRUecwOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f4c0275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200285,"size_decoded":29681,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5e07655379a960ef4a2160560861197","sha1":"0d304da5547f51812eb9fa57f76c4a250b72741f","sha256":"9b90dacdc6374ca4928a981d2181d0ec6a67c64620aa3d8ba66d9b90f744816d","sha512":"76bb4ccc548613c087b06273d053fa45e7f5d7236ed4ecb69cac29a24cd75006e281ddce7c06f9bbeff9fd33f1504c175167d6fbdd18ea4d6867bf86c36bb3a0","ssdeep":"3072:6B1P+lk4Kh+iDqr/ZA7kjjD+1JSU6JFlO8:6B1Pck4Khfqr/ZA7kjm1JSUOlr","tlshash":"dd149314be9a116d7e134e27218eb9c87c24b444c732079aed36516d9ac2cfe2af375c","first_seen":"2026-07-10T09:06:31.108917Z","last_seen":"2026-08-31T07:38:08.171216Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.406Z","timestamp":1788161835406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 02 Sep 2026 07:37:15 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTp%2BsrZsM3rf8nTt0EvarKNCVtVouzHUoDlU5jrdpYqx9FGGmVHigqs0wWNHeeUpPu0NLoWxFfa78Xo6%2FlfGlb1dhWmA8L9NygFyROlptZvGRwoadIMS52TK8nvUsm%2BokbKX%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\nserver: cloudflare\r\ncf-ray: a33a5e6f4c0575ab-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-31T10:28:38.235519Z","times_seen":428382,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.841Z","timestamp":1788161835841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: \"6a5758c5-c48c\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjgWzfayiuD138dtXs35FghFEZcm1Pm8yCDuKrelNL6C5j%2FYtACcZSLvNVGu4vuNm46CUtqWrixoMhL3JBhi3XMV4p3ls8xOEcF%2BAkMNAXkW1GkRD1qyfySvE9BQmtVa%2Buo0BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e720c4c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51062,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-08-31T10:00:38.515333Z","times_seen":24323,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:16.497Z","timestamp":1788161836497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 07:37:16 GMT\r\ndate: Mon, 31 Aug 2026 07:37:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":1773,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-08-31T07:38:08.173301Z","times_seen":154,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":2,"dns":0,"connect":16,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"appkyber-swap.com/images/image_d44513d8c226023704219c7277c0cbcb85c9f202.png","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.422Z","timestamp":1788161835422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /images/image_d44513d8c226023704219c7277c0cbcb85c9f202.png HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: \"6a5758c5-2654e\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cV1slxYrXROivuSMEWiCFcaOpnbp7DlDZblYyPJgTuBT5TbCC%2BpW7lxkoFBiRtB8hSZexLruEJP%2BHAtOLypKc2mbFyt31t0QGSRpOngOhu5cDBBv4H3ggKr4uO%2Fo2DmiNtQwgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f6c1275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157006,"size_decoded":157750,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"9ea20b632ac76b7a1c5fd9227d5993a4","sha1":"d44513d8c226023704219c7277c0cbcb85c9f202","sha256":"106c85eb541b76bdee4c38e37f7a3b3fddfd26db55a4fe9c44b50d28edc05561","sha512":"206e7c7c388158d4d1a54a58cf0740546aa68bfdb4e5a5ec1cba8712a1263e2fa6661474360def33913da879a698a57e16f4c9b62c2172bbdab5ff20530c3aa5","ssdeep":"3072:7sighxkoLA2iXFXU+TJnm7zlimtLWcuVDp2zpSDTDHqv5LPIvyqSW:5KxkL2snBoAsHubb/eBy31","tlshash":"f2e3f18b4e7a0cf0f2609eb89deb2a4976e905fd42386d134379d060bc4d74974ef686","first_seen":"2023-09-23T00:34:54Z","last_seen":"2026-08-31T07:38:08.17422Z","times_seen":30,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/images/image_6a92887e90fc042ee2e4d0fb3854692beeaaf19a.png","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.424Z","timestamp":1788161835424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /images/image_6a92887e90fc042ee2e4d0fb3854692beeaaf19a.png HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: \"6a5758c5-1765\"\r\nx-ray: wnp68428:0.001/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BnhZhnABJajiOQ%2FIUFYr1eKV8LGhCoSjbM8T0FVKZT0mEi%2Fxoie2FB3EJ9LYiOnbLgokgpcS6cUm0VwWjwzLJQiTtt9YYISvbGOJuo3bZAskKtfN%2BYScyBHr0Qk%2Fn46s1xdy9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f6c1375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5989\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5989,"size_decoded":6734,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"61e20ad43bafe0ca2b7ada87f1792a4c","sha1":"6a92887e90fc042ee2e4d0fb3854692beeaaf19a","sha256":"32076120b7bde0202fda306280a9df7917a5ab1a396d4a87db012930f8bbb7b3","sha512":"abeffc786faf67c9a0dc178b0ffb8aae7fbac541765952a55129645914ee52f51ce0e09a753442baa6b984560aa51933a5d24179f1befe1ccf521ea4d5763f2a","ssdeep":"96:4MEbD/XFc+Xcwyn/s11yjmNrD9zNoqtl9QNpvRq3TS+0wv2yb7f+5djnLprn:4rfepwy21yjY39Jzt7QNpvYOe+yb7fe3","tlshash":"a1c19dc0d974348607ab31e946f645e4b26a5f2059329bdf95bf32b1c633336d742103","first_seen":"2024-01-07T14:24:30Z","last_seen":"2026-08-31T08:37:24.188279Z","times_seen":47,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.784Z","timestamp":1788161835784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: \"6a5758c5-c48c\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHazkIkvOZP9jzoOmENxGoUl4C7pl2YsOfF0exApoKYyHXkDXmBy5WDfvp8%2BM8aKH23e2zC0M3LCQd2pMHb0UadGhoJJVj4%2BAi7w04JKBe2DLuaFX%2F6f3wC%2BZEjwXlqgZpeByw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e71ac4675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51064,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-08-31T10:00:38.515333Z","times_seen":24323,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/swap.htm","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:37:14.917Z","timestamp":1788161834917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /swap.htm HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:14 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnKB9Ms%2B80qLORJU%2BXoTXMA3Dxpq2DDCUFbYUm8taLta2wY%2FaPLriP7rt%2BFBwyA5n0%2FFRd9oyMA%2FmCF%2FYrBiDkuI%2Fk%2Bf1GZ3XV75YCR3jOfPj5ftcqGu%2FrP7KhW%2B1XB%2FXYsAfQ%3D%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a33a5e6c3be675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184421,"size_decoded":53971,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (43015)","md5":"66feb7eb0b56959b4a21180df5697038","sha1":"454f51c1fbf2bb7b4f35b7cac73d27bd33cf12f0","sha256":"e24c3df853d27bf79e5feffacf202613983d95f526c152b4ec0eae22dda31de6","sha512":"5fead77d183605c03fa1ee8f53ece2130d11716af1c45efab51a2604570ca3e7b6b2fbc72876c22d3c262ff1b58f089a3320355a4cf18400ef6a2b244b6d3674","ssdeep":"1536:V9mQ914zExY1AmqaDwcZGVsbGMlwDE5Y1oWxmxm19zZJ5bHYSZz6gvjMMcpyPkwC:jmamZG50gJJz6gvjMfpyPk57Ky6Y1","tlshash":"3e042af2a390a0fdb81387b4e139b97d720b74b6ff654a84f6ac5b9067c09d64c06d80","first_seen":"2026-08-31T07:38:08.175929Z","last_seen":"2026-08-31T07:38:08.175929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/assets/w-loader.js","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.408Z","timestamp":1788161835408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: W/\"6a5758c5-a2f4\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyYAbJ9clExC3iwKJKDZgdTuT9dEk1mjCV5TmGAZXyv8GCh57RJmktPPgEtDUxRIIPTJ%2FjB2Olsq%2Ba%2FSDtOQtDjTDGLNEmwj2j7FdPuK2qeWy%2F7cRttJuC%2BWCXQE5Vag2jMleA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f4c0875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":7927,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-31T07:38:08.178412Z","times_seen":411,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"appkyber-swap.com/logo-dark.svg","fqdn":"appkyber-swap.com","domain":"appkyber-swap.com","tld":"com"},"ip":{"addr":"172.67.136.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appkyber-swap.com/swap.htm","date":"2026-08-31T07:37:15.416Z","timestamp":1788161835416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appkyber-swap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:07:27 GMT","end":"Tue, 13 Oct 2026 09:05:51 GMT"},"fingerprint":{"sha1":"5C:75:DE:8A:AF:E7:2D:86:E5:21:4F:AF:ED:89:41:E0:B3:DB:AC:36","sha256":"C9:E3:08:ED:45:64:9B:D9:D1:5F:11:27:02:4D:CA:DF:DB:C2:CC:AE:89:72:0F:69:58:B0:1D:0D:8A:F1:C9:06"}}},"request":{"raw":"GET /logo-dark.svg HTTP/1.1\r\nHost: appkyber-swap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://appkyber-swap.com/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:37:15 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 09:54:13 GMT\r\netag: W/\"6a5758c5-2d0a\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShoAT%2BFk7kRy4JjQXiiKnJYQvE%2BJJ8V3cUq9hfogktW983%2FK08tkzcPnlPeFlmCGoQ8wcAhzIbYPhwiDG3sUFqIyPuOww1eNQyhoFNtl%2Bf8z3aaEdMLK1NeRqopBNs%2FPUbZOVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5e6f5c0f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11530,"size_decoded":5715,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1e97a70a4526e877c271ea0e1c7872c","sha1":"4c977dd6993134311a58766c8765245f546f840a","sha256":"68f4ac53c4d68c54934a4620e605d9e190040bec7736487765225cd2e318810e","sha512":"761b7d00bc2ebead6c026850d043c95d54b4087488bb25a8f25a3838901282a9a8e6b360d7c7dae5ba48ecf4ffaf504b44cf98a9afd57aae0e145d9181756067","ssdeep":"192:hI+YuhJUKu168eQDuzbiuPijpcrn4A3Gh22z5PRo4ckhGQnzcuV2lv/ogonImXtL:W+tJeJexHiTcLl2z1q4KQouV2p5mZ","tlshash":"0332d5cdaf648af4e081e3f5c61794bd7a9a9dfa7a50c47cc7f50d12a49245e8902cc3","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-08-31T07:38:08.179281Z","times_seen":41,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"appkyber-swap.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}