Report - appsweb-server.pages.dev/wallet/inputs

Report Overview

Submitted URL
appsweb-server.pages.dev/wallet/inputs
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-20 16:31:00
Access
public
Website Title
Connect wallets online
Final URL
appsweb-server.pages.dev/wallet/inputs
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
140

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-20	1.6 kB	57 kB	216.58.207.227
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-19	512 B	1.2 kB	35.244.181.201
www.connectwallectsonline.com	unknown	unknown	2021-11-10	2021-11-10	3.7 kB	0 B	0.0.0.0
appsweb-server.pages.dev	unknown	2020-09-02	2023-11-14	2024-03-09	30 kB	2.2 MB	188.114.97.1
smtpjs.com	309535	2016-01-30	2016-02-01	2024-04-18	404 B	1.2 kB	109.169.71.112

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	appsweb-server.pages.dev/wallet/inputs	Crypto/Wallet

PhishTank

Scan Date	Severity	Indicator	Alert
2024-01-16	medium	appsweb-server.pages.dev/wallet/inputs	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	connectwallectsonline.com	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed
2024-04-20	medium	appsweb-server.pages.dev	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	appsweb-server.pages.dev/wallet/js1.js	2.9 kB	2023-04-05	2024-04-30
Pretty URL appsweb-server.pages.dev/wallet/js1.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 04:21:49 Last Seen2024-04-30 07:51:30 Times Seen160 Hash 15e1fdc42e78658a13568f7b1e35fc77 20652fe69d5d902bf95f91582087ba61d705666c e7d7ef7e68dc4480c2437b7a20a9f93dd5cdc5c3287cb3e157a0505812b3abcd Loading...

	appsweb-server.pages.dev/wallet/js2w.js	5.0 kB	2023-04-17	2024-05-02
Pretty URL appsweb-server.pages.dev/wallet/js2w.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-17 07:09:32 Last Seen2024-05-02 18:27:26 Times Seen174 Hash 4d13047b1374a60684455ac688113669 68a84415438d070c3646ae61061b432f3ca87927 de176b77d7d458466ac0ac010cac961b3903341da7a35ad4ab5673f270a3c284 Loading...

	appsweb-server.pages.dev/wallet/inputs	274 kB	2023-04-05	2024-04-30
Pretty URL appsweb-server.pages.dev/wallet/inputs IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:21:49 Last Seen2024-04-30 07:51:30 Times Seen127 Hash ec5fe1bd2b43629ff7c4d8e448e43bd8 b4cbcde9e1535cb8575cedac2551c8c0bf764787 423d6542ac2afbe05588aeeb805ce9249a92d084d95751eaea0787d404900e02 Loading...

	smtpjs.com/v3/smtp.js	868 B	2023-03-07	2024-05-03
Pretty URL smtpjs.com/v3/smtp.js IP 109.169.71.112 ASN #20860 Iomart Cloud Services Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:38 Last Seen2024-05-03 19:36:26 Times Seen2426 Hash 73572da03234fa6d561c64b59c152230 5de5efc900b7eaf2b93b02f7c4c260fa938ef983 1fd711cb491a361ef91e29c50de0680a4b156c0b34bb91e18570d0037263a776 Loading...

	appsweb-server.pages.dev/wallet/js/app.min.js	536 kB	2023-04-05	2024-05-02
Pretty URL appsweb-server.pages.dev/wallet/js/app.min.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 04:21:49 Last Seen2024-05-02 18:27:26 Times Seen160 Hash 3caf6930eb9bcc4148d54cb1753c1ae4 25858b2e06c784cc8849539230693639c8ab18d2 512f2d466ed088ca0c9f6d1041a60bed901c372acb7b2d12230360516d2ff936 Loading...

	appsweb-server.pages.dev/wallet/inputs	645 B	2023-04-05	2024-04-30
Pretty URL appsweb-server.pages.dev/wallet/inputs IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:21:49 Last Seen2024-04-30 07:51:30 Times Seen132 Hash 7a98349e3d78c27b4b9397cfd25994a3 54f1b209643e32b3b56e09416afdd49d8658a0c3 37d60f434e5a68ede9967a8a19080eca3a912ca2289cb5c5cf45597af6464576 Loading...

	appsweb-server.pages.dev/wallet/inputs	1 B	2023-03-07	2024-05-03
Pretty URL appsweb-server.pages.dev/wallet/inputs IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:54 Last Seen2024-05-03 20:51:17 Times Seen69635 Hash 68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b Loading...

	appsweb-server.pages.dev/wallet/inputs	155 B	2023-03-07	2024-04-30
Pretty URL appsweb-server.pages.dev/wallet/inputs IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:29 Last Seen2024-04-30 07:51:30 Times Seen139 Hash 856e3802f5646a8ef09d87c63afc753b 3343c72c39078a28d380a306261ace8e314feba4 539ce9de1711250746b5985c6e1b4eb3bfe9a9b8c4221ae6321c1fe5ce868865 Loading...

	appsweb-server.pages.dev/wallet/js/mine.js	766 B	2023-04-09	2024-05-02
Pretty URL appsweb-server.pages.dev/wallet/js/mine.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-09 07:47:24 Last Seen2024-05-02 18:27:26 Times Seen161 Hash 457e9c039158f3a3ae3638115ba70935 9f4bb4fd77facbaef765c268eb9ce6f6677a5ff7 662bb9c9d16848a2cd955188415e6a9ef75fbd44a3711e2fddd72d6482a6b147 Loading...

	appsweb-server.pages.dev/wallet/js/form-submission-handler.js	3.9 kB	2023-04-24	2024-05-02
Pretty URL appsweb-server.pages.dev/wallet/js/form-submission-handler.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-24 07:22:09 Last Seen2024-05-02 18:27:26 Times Seen149 Hash bc1098be1045134f06bbeb88c7f4f989 799ae35678ad386c3c8be35c927961b86a5fa3d8 5489be50c2b337c82218c4386896869cc2eda978315299b925a391df2a250805 Loading...

HTTP Transactions (73)

URL IP Response Size

appsweb-server.pages.dev/wallet/static/cake%20defi.png

188.114.97.1

200 OK

18 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/cake%20defi.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 200 x 200, 16-bit/color RGB, non-interlaced
Size
18 kB (18196 bytes)
Hash
332670f417286038928ee59b926d5f0a
2c125c495e7cdd464929dfdf14b0f78163c9c153
0e38eae41b479ecd8df40dbebd738da485c2d97d321d75db2f079f0439cf179f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/cake%20defi.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 18196
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d5ea9f39eead1b472957ca620a588198"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2H%2Fq%2BCfdRKXdvk7JXYimtePtrZCT2LqWhL%2Ft%2BOv784JNytq6rfxfNxL9zAaJTM3Tjjrcw64CWaK3QPQdmNZosYM8sDB1O8KrJQ4hJFaPyQtEcdtBwF5ODbBwfct4x6Uxmb2xDGIy9kytq%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee9569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/trust-wallet-66f8777532931d9c09b633344981a6a9.png

188.114.97.1

200 OK

4.9 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/trust-wallet-66f8777532931d9c09b633344981a6a9.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Size
4.9 kB (4868 bytes)
Hash
aa4cae32f46260663fb90abc8153bea0
013828c94a8a6d44a95523b4352d5edd7f29a321
4c7260d3a03b17e68dc0b4983409158852404b56b9e4dfdd4f3724189a07dcc3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/trust-wallet-66f8777532931d9c09b633344981a6a9.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 4868
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2d3173e31da19da1a4f8b7fa3970a450"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=voHuy8kyd6Ta0eXUuq1LfxHw2qGfPRnttg6Z%2Ft3ErL15c4mS93%2BT82T%2FPxnU3%2FtluaygfeCiz1grbkPLQOqQaGEy1oFDpM%2Byc%2BMW%2BFA2bwIYEB6vNDeCOFBgn0KHEtsEUiirgVtCVLKOu7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee6569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/error.png

188.114.97.1

200 OK

2.7 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/error.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 259 x 194, 8-bit colormap, non-interlaced
Size
2.7 kB (2742 bytes)
Hash
656767a090b853f4c62135e4c3b52010
ba238cd323a821f9a84049f2390833c24744591e
b13c7606b4a8554a450f39807b26fd4a45d7a77cf65fb1151973b549020c8882

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/error.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 2742
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7667e2c8554f501ccd77efd4be5e8403"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XdOL2MrQoYqXiEfpBB33iW1xwPBlAJIt7hEnhvH3Fuyfw28X7XGKTgCXvlmPud%2FGKs9sRo1G9VJGCOVKyeK9zYta51xR26gvN3PKktsTXy8hCS0QPhM1TAJ9mQ%2BTorDZy9YuWPUE18Lwz1Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5eda569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/otherssss.jpg

188.114.97.1

200 OK

9.1 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/otherssss.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 513x598, components 3
Size
9.1 kB (9056 bytes)
Hash
e06ca5b89d661ad8ea28333eb7f7e24a
3fa9fe08f94d3678bb37f181619f4335b65c0906
6825aadd71fec0e547aa35d6eb84b61f0791a7bc83418272cfb773a4bc58eda4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/otherssss.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 9056
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "99235c87e5e0bf9aa05017a50f222733"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x1yAgglZrYhtxBbuEdTAkp%2BJdjCBp8gmmpVDf9lygA2nzK6WTw7KcD7Kwuuap4exV8hixya0cpdZFL%2BwVB%2FaAbPKTPm1pv93cbE04eIfXwXtXHZLWjoZWGZRCWiiicWdQn%2Fv0rjEcHXpZ4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ed8569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/rainbow-207dda8d66f8ffc00a21e4fcc5ce0a73.png

188.114.97.1

200 OK

22 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/rainbow-207dda8d66f8ffc00a21e4fcc5ce0a73.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 420 x 420, 8-bit colormap, non-interlaced
Size
22 kB (22036 bytes)
Hash
b2521ef2692ac7c8802b1d17d494f2e8
ba4a36fe55376d0b43410230ece5b99d7e57504e
2e4a7b4b020e2822694880cdecc65e35972e7f961db8596912f92b8fe2af1d40

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/rainbow-207dda8d66f8ffc00a21e4fcc5ce0a73.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 22036
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5e26af44f8b5d24b9993e69b235004df"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QTnNcuz6vGB7jPTPfuDmiXPG2x%2BjhdmfQnTUWzqQ4Y1vKYB649eYpWKfAKlPDYP0XKhyYF%2BaqupyuoYtpJq2gi4XmzCA5WUSNPoKlJI4DI4ksuf9FuC0dH8CRQoYYO%2FSp%2FW5bxd0gs5n2vE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6eeb569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/bsc-logo.png

188.114.97.1

200 OK

23 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/bsc-logo.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 338 x 338, 8-bit/color RGBA, non-interlaced
Size
23 kB (22565 bytes)
Hash
473b05a2b26173f477aa4fe36ddcf36a
449c7aaded7ff019d25cbc983ddba1b00f49b34c
25450d45cb0f88f0312d658ce75e537cf9b6c9dd5c6d7b905710c1afe5dbeb9d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/bsc-logo.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 22565
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b1a30e0217fc09dac12484ce0275d21a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=avIcyjQO027xMp3h3Q97DMRty9E%2FpaJky2X6Vghcw5fff3xfz9mqvqz1FEaO33ZLFMNjbYsBiLt%2FoAcRF0V9ib6AxlVZF%2BzR83drSME8Ea%2BKmupJfA3rdY0g0ItpTauP8Pjj3aDo6UuKMBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee8569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png

188.114.97.1

200 OK

9.9 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Size
9.9 kB (9914 bytes)
Hash
c4ff79e07cce011b60eacd026fa3ca7c
fe03e0d06bb5aadf1a060d3b99ddc943d8810b4b
481ab42edaa77e032a7a53e2ae191a1d8f39932cac86e61ddb297cc71802c7bd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 9914
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4f651d53a8a7bec322a5f9c9e1b9c2c9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BkRwa9GAo4E5B4YvEQPevui0VfycwXv1YVFpDE3WNJTD7r82joWJfmMThiXd1srMVJgAjAAVuHzAmQiLM9aF7WMeBXBXxoeIug9jqMG4lZqZQEmTJ5%2BnBvInlT6u6Ta7WRe7JUYesVYzTlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee3569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/crypto-4cbeac57421fb3ca2573db2cf448169a.png

188.114.97.1

200 OK

27 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/crypto-4cbeac57421fb3ca2573db2cf448169a.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Size
27 kB (27261 bytes)
Hash
500937c7bb85e0bb58e5043461f80b9f
a4a541efa9c55735354bc8ba8b929abfbd947b38
663d35a3d897c47e87516ff63f3913ef3025c3b13b01ad056d00ba856172d8b7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/crypto-4cbeac57421fb3ca2573db2cf448169a.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 27261
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "12d8c15829360d3f162081506309227b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OTX7e5%2Bqxo0dgMfi1dSdp8DKeu3A8Y5fANoTy3HGJUh08lG5y2a3ijh3KSlFyPxfkn9JDv6Qa21rdBAHR0O%2BQEAolpPUInfTdV68f79NaOOu8dD16AxyVUXvHbfa%2FkKCrcqfYe71QCAUiY0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6eed569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/onto-983003d35fe32bf916f9eda381f138f7.png

188.114.97.1

200 OK

8.4 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/onto-983003d35fe32bf916f9eda381f138f7.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Size
8.4 kB (8388 bytes)
Hash
9747beb608ad621d9602901df58d7d8e
59f8e6d6874a8214caf31036b2584afcc50e835e
10340ccc4fce1c9ad810ff8aae7405699f57a7f41f411c593b7a6962ff945975

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/onto-983003d35fe32bf916f9eda381f138f7.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 8388
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "23b9951802a7d44f24a03586846d51ed"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ztHcp%2Fn4LzRrXLJKgX%2Fjv%2Fjv7WEsPMnang0SeAxtkgX%2FRtRBzHxUOWXHLM9S19w6GyX2rQSG7EW1HYm1YLYe4sSGLn5zGQq6AldQBkDRLiKhOwTjvVprfLB6psCqmqNvqTzshDYTCw%2FXQzk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6ef4569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/math-wallet-9e2256cfa5aad3b33af05f3fee4dc9ef.png

188.114.97.1

200 OK

31 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/math-wallet-9e2256cfa5aad3b33af05f3fee4dc9ef.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 400 x 400, 8-bit colormap, non-interlaced
Size
31 kB (30923 bytes)
Hash
8ef1856a4f6cb16038b2608bf32c6bdd
477f99be9dd16d7ad84ec6f0451a9d9baea92391
d5d2cfce4b759fc1d2e19f4d2b5800935934defaf6cb7eb09550aeebb8f45405

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/math-wallet-9e2256cfa5aad3b33af05f3fee4dc9ef.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 30923
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8e386b5077220ffac49ab102f44a85da"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LVrDi6b9TRSdhKrYxpmuMDYIB%2FD8t%2B6%2FoiTcZ7tAvrtzLBoDrH3b%2FrLn%2F%2FyY72%2Bg5vNDHsyHcJg2wMqJwynZ%2FZeVz7nUr8AZO8cwaKGnrQDF%2FlDq1Y5NKWyJRZpIZxgywx6W1PjPotYB370%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6efd569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/imtoken-fd8c7c52dac6101568954e7448a49202.png

188.114.97.1

200 OK

16 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/imtoken-fd8c7c52dac6101568954e7448a49202.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 400 x 400, 8-bit colormap, non-interlaced
Size
16 kB (16524 bytes)
Hash
f0df9d44f9959b4f153a81fe5050e051
18baeb6efd7b6f929432a2d20fd5858c225c2c1b
f0c3ec0a5a55984c9d9f25774bbea242596b5d976a65579f6ebaf82002a360c6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/imtoken-fd8c7c52dac6101568954e7448a49202.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16524
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "694b5f6ea2650be5add9fac84f5d02ec"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T7lpQXaIUIM7tgjcoiQ9RaNyX2%2Furgscgl%2Fppy1OJZNYaNLiV%2BrlSM0qg78MQMo2fbSThFUpMRJh9hMvoxy2B2Tjju36hq4NRGU6SJ12QhYCi%2F3Q76Ot3gsUpCf70w4JF4xSdAqtLGp8kPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6ef1569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/walleth-b60336f8dd9ea86285408cb4f96634d1.png

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/walleth-b60336f8dd9ea86285408cb4f96634d1.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Size
11 kB (10649 bytes)
Hash
0332a155bdf19b17b6a8f3d51441a11d
0acc86472737ec2cc4b8d5e8293af973bf0c9e3b
37d02e6539ffef6542a6d5706b7739c2a6daa87a3407837e34a2f7b985cf449f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/walleth-b60336f8dd9ea86285408cb4f96634d1.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 10649
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c31362fd1c7419a07ba419029a258a7a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q3lQOt3rye6GrmTy7utjhuLIcQatbxkHzpFsfsF5e3NhK%2FNVvN0WRjwumG%2BUKgbKSCm583C17qfEFP7W8ZzpIKaGbdVzfW6FZH95Gci9%2BGMfJaOWk40MFYEBBBPX1O3j9vkIb4QAvCisJxQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f10569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/authereum-32f3939207b77c1837547d5ed4f86110.png

188.114.97.1

200 OK

7.6 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/authereum-32f3939207b77c1837547d5ed4f86110.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 596 x 596, 8-bit colormap, non-interlaced
Size
7.6 kB (7633 bytes)
Hash
3bf9c889b1978ce4246a0770a9330dbc
602d749051e8ab141f848ac779356bb72080d5e1
536118ed978930e9f559116dbe47e2d926bcbcdc68ccd66c09f35a233aac7180

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/authereum-32f3939207b77c1837547d5ed4f86110.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7633
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "66a9612d1709a9203cba751ce2e285f3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9pO2YNxUbKB2fyNoqERJRxlOoU3XGUYTGOAr1FWd6PBM15GnGTpTV9aOLbAi%2FnT6WjGSiptx%2FrW6yr4DGnXftyvENYG58XBMhdyuj3wVJyhvULcHxzxAoozxWJDX%2BqDePDz3xw%2FOeeWpO7A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f11569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/tokenpocket-57a4a886cc644e5237ac1558226154cb.png

188.114.97.1

200 OK

6.6 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/tokenpocket-57a4a886cc644e5237ac1558226154cb.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1025 x 1025, 8-bit colormap, non-interlaced
Size
6.6 kB (6590 bytes)
Hash
442235cb72d9e15c295369041e396e73
726d60d9c09f48b8268b0323b4f41845c18c0c6c
7d29d77c8e6e0425979ff3712689a22bc8a8c07d2653da57c620a828b5944203

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/tokenpocket-57a4a886cc644e5237ac1558226154cb.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 6590
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "65d3d7e5f3c56b85dd17a146e822123c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BTmVxMRZz6vJc96Z069dnuKIaCyHQer0OZuE49bwJjPFTMPxQp9YKcREw5cVdZ1qN7yAbwb5TxEovXsrD3XBKHvueR6p7OIJA1ifTj4bK9m0usKC8WF7sMtRhZVSja%2F3GOjib1QEPBLOAgQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6ef7569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/maiar.png

188.114.97.1

200 OK

36 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/maiar.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
36 kB (35963 bytes)
Hash
b0877d28e416ec23c239a7e10e2f397f
fa9125bacbed52a0b96bc27be6b34dfa18451644
e2a3b0d3f1792998c5422fd090791ac37fe460fb86f3f0127f170ae74557e6f6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/maiar.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 35963
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8a42dc1d64426c53f8213177cd5c96bb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6SLid7RSsIec14M1rqsIGHLdgRA%2FJkPtsYvmvKWSj5oJruvIRZ830cUSwgFpPiuNrUchX8yLTdHkuxB7pcm60CxdbAjM1Im2M8ZL%2Fi0o7S5aaNyCUU5TVi7t9wiuGYOBFveE3kAYKAqjto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f0c569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/ledgerlive-9fe387e571fb42ed5cdf08e29bc920ed.png

188.114.97.1

200 OK

7.4 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/ledgerlive-9fe387e571fb42ed5cdf08e29bc920ed.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 460 x 460, 8-bit colormap, non-interlaced
Size
7.4 kB (7417 bytes)
Hash
b61380d1d625acd5236637674ef89540
bbc2345ca11d7753af9027df2e975b83d58cde71
12ce508093871afde606fac87247346fd775a111efd0e6aba9208bcfa63641d4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/ledgerlive-9fe387e571fb42ed5cdf08e29bc920ed.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7417
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "61051e5eb2790660aec783b7245fe082"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KvxB3pg9BIF6DZAXTvjThKH3XHIk0V4EyvRQInbwYPunzh1YwuTlNZB%2BjZXS3GKPvygk34U%2FBEVA3OJpCTahq%2FTUUzzU%2BZLMUGuMwtj0P4PCcLXUBgucZncjecqhdxU3BF3P2etSYhhKrmU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f0f569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/coin98-c5b50adaceaf474e48ef1dad150d0829.png

188.114.97.1

200 OK

63 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/coin98-c5b50adaceaf474e48ef1dad150d0829.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 560 x 559, 8-bit colormap, non-interlaced
Size
63 kB (63204 bytes)
Hash
d26fff041871f323018c7b301a694c7b
bd6011749dbffcff4609af30450c7a4eac94c79c
2a35248b8c44e32680931b3218a99fef1ffa8b7b8a8770018c5e885d49500f29

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/coin98-c5b50adaceaf474e48ef1dad150d0829.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 63204
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4449901712f50802b0aeb985ced3752e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=heHL%2FlyWuLcQc6OD%2FLojbZhJ%2FcenHzaGjvUHpwleN6ufCZKZkLedpsnOG5WBAsQ0ENmcy2hn7llGaHpYgqPG5kGCDP9DSpzyCB4rIVUR8Sw6qghiNmv8IOT0XUIg5lFOk%2B0CxnXpKpmA6gk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f1a569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/parity-signer.png

188.114.97.1

200 OK

4.4 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/parity-signer.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Size
4.4 kB (4405 bytes)
Hash
a538c4237c018bb5ecf9cc63e7d78231
1fea5b4b50cb19b38a12ab97926cfda184f5fe0a
6fa0d316441513d656755906806aa127728514c46d6d0e7acbf0c3f8b9e473d0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/parity-signer.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 4405
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d8aedae1b1461b2c3ddf44a3685f00d3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LqbugYuFGbkiTavDkOaf3Va0Gm7JkpSb8tvl3GHgy3NYoHgyqX%2BKKjRVWcDeZbiUmUQFz2cfxdv6Mt31D5G9gn0vl%2FgtoFX%2BMntaj77USQElsEjWqCio0pzZsxNlfBtspcW7hwHn%2BDY2uRc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f1e569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/dcentwallet-f0bdbaec0837431b87ac9886bb22dfd5.png

188.114.97.1

200 OK

8.0 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/dcentwallet-f0bdbaec0837431b87ac9886bb22dfd5.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Size
8.0 kB (8033 bytes)
Hash
47e2ad4467a524690e3a9a199cfea8eb
5c3d98c88e570f9779d3ba328c11442cf20b8921
1fcbee125b4a2221d3828710e5534d4259c6df3fd9fc84d63d9a12b338fe301e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/dcentwallet-f0bdbaec0837431b87ac9886bb22dfd5.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 8033
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "9e0f157a2569390f6047d6ad17ae23cd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BDWhP889vvvgtL3PPM%2FR3p%2F4rf3u1bmpCpB8%2Fm5QxbYjurAnKttheunpWhcSjzCh9cCsoYnMphG3h9PmOZFdphOUfXCm%2BuQZTPq9bvphJwDdOcNtfmvklFR4Jjw9is%2BWnvhLkmQ4VNdAWP4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f22569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/zelcore-d4c1a7a444b95612f6373f0b536b6ccb.png

188.114.97.1

200 OK

45 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/zelcore-d4c1a7a444b95612f6373f0b536b6ccb.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 2001 x 2002, 8-bit colormap, non-interlaced
Size
45 kB (45396 bytes)
Hash
6b0fcf3084e61d672d0f39c0c8bc4845
c5a90ebda934c04e524eabcaab5d4a9e5be8aa53
27db3752a4289c09b2a3f970487ee860daa7288f04cf3e3d7cbb8961272a3e68

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/zelcore-d4c1a7a444b95612f6373f0b536b6ccb.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 45396
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "40c94b279ce352c3b5857c8b239b6eb3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M9%2BO1cmzi6KNNeMIQvYrFVBq0az4g%2B4ExurAx1u7cwcHuNPp7pKBYumw06tBDpYIabb%2FEVH6i1H5t0wcwIqJcfth0hEauQRIcxx4PIpUFhYiF%2FSw%2BQKbhu%2BWmg8bzfqSXGH4prHjItvuFhU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f24569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/coinomi-7eecd68e38d78752d68b7232bd9c58d9.jpg

188.114.97.1

200 OK

14 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/coinomi-7eecd68e38d78752d68b7232bd9c58d9.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3
Size
14 kB (14122 bytes)
Hash
ecd4d927ed747e9b340b45410665ec6a
f9a65b0a40924bf79caf2e3ffddf2586fdb26b4a
72e14e276e668c5c0126853543d6205dec0dc5f7aeebb6634b7f631aa125f157

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/coinomi-7eecd68e38d78752d68b7232bd9c58d9.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 14122
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "51a63d97c422843be8f11f6f2aeb1ef6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nag4F6S67gJBRXkH5IADAyaPgUQxAlByGFhc3cf2dTOdQ9RNDbr9PVeLe11kLOsUpHvT3lvB9bkqNCFTPST0oKUB%2FS9xqwfT58v20KcfO8mCbtlVg%2FUoyxzd%2BSCSjvdHjmzSA2ayQtqODSI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f25569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/cybavowallet-16e7e96f2e3df01fe2170da5267774b5.png

188.114.97.1

200 OK

140 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/cybavowallet-16e7e96f2e3df01fe2170da5267774b5.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Size
140 kB (140157 bytes)
Hash
e32f670b6af5624d8724e2196b3d4379
4d83f118b5c7618a80d9109c5d843b2891789f00
b690836dac57a2a985b8bf613d478e1b554fcfdf7baf42c4ebdf49b298fe15eb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/cybavowallet-16e7e96f2e3df01fe2170da5267774b5.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 140157
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "edc47741ea7eb64c51d4a0ba8b6adbac"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wjoBYfFlHdIFpUFtWuVT4DyDUFJnGnIwXEJ%2FUwNFluVWkWCZ8oe9UAtPcC11Gv5%2FUYPQ0lAOlYTaSnbVFDlsqjhcl5dufQEaNnHBXA32uV8l3s0M7pNMz4ze8z52Lqxkeaw0ydsAGlrjv2M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f2c569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/wazirx-logo-rounded-9bff9f42.png

188.114.97.1

200 OK

12 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/wazirx-logo-rounded-9bff9f42.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Size
12 kB (11806 bytes)
Hash
9ba2192a5a41f8ce3274d1c94d7db369
1d3892ba1f63610e89bc1d0d10a04451d1a9bffb
7686521d3e7bca651a2090b7c874f8509206e0ff525dd47664ae2a5bc0adf2e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/wazirx-logo-rounded-9bff9f42.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11806
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f0a45d4127a7215de8723a0190534f4b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3UY8rPnHnSICrELTYee85%2BE3Q%2F7lOhsEU5kv%2BhjdzD7Er2qxJuRiujxDLHpRoczJq%2BohQEQ6vNSOxMbjeiN2AIgE54ZtCZ9smbMtPmhyZl2yPwK6HXKv%2BwQXlhOU7ZdNjIeAKE8j%2BhxSvv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f2d569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/infinito-wallet-68da061495160c96f4bcb5e70e612fdd.png

188.114.97.1

200 OK

5.3 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/infinito-wallet-68da061495160c96f4bcb5e70e612fdd.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 227 x 228, 8-bit colormap, non-interlaced
Size
5.3 kB (5332 bytes)
Hash
1b7bc4d69d08a6c0ddf62b97296c0f36
93f5777cb640b1967e29e5bc057cbcd9ab55919b
6410f0205a4c47eef380a616cdb3facabc8337846ec06394d36a3f6c2345601f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/infinito-wallet-68da061495160c96f4bcb5e70e612fdd.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 5332
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "87026a500fbcde4c520a77c30897d265"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1CurOY8bYZqAzkvaw%2Fl56IUShCwFOkN7w%2BUok%2BrsKFsjiGWHy8tNWcTOl9D%2BCj8RTsaCUcWLItpPnXibuDZnXrycJ1ZfLJ7xaY5Z2E6zN1PGUwSAInljvdsWGt9LYfc%2BxrpH3R47l2kd0C8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f31569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/wallet-io-198f396de22fe25eb370f46544abe69d.png

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/wallet-io-198f396de22fe25eb370f46544abe69d.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 400 x 400, 8-bit colormap, non-interlaced
Size
11 kB (11274 bytes)
Hash
6936b6160bc96fcfe6f17ef68a5791cd
88b8151ef1cb6c9b34e6d364038bb9e264276b37
2c181af611618f9787aec5272ab2097b7a62ae3a1a853b4ca0ef3757272aab4e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/wallet-io-198f396de22fe25eb370f46544abe69d.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11274
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f241ff74325aef91afb7fa39a6e5ca23"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bn7ZxdYpkjd9eiFoD4YqNXTi7Y9IemlHtETgkF4ru950hzzHQVjmWzD%2FvNhubQRJf%2BoxsbpJNJ1gJs3jeo1LsG%2Fs5BzU9NdR%2BBphLbCdRWlFAWm2uJyqdlouU5WTiSsOJNoFgjxEhfxyebc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f32569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/infinity-wallet-48e78bc97f96bad14ee6b781423a69ea.png

188.114.97.1

200 OK

17 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/infinity-wallet-48e78bc97f96bad14ee6b781423a69ea.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 939 x 939, 8-bit colormap, non-interlaced
Size
17 kB (16780 bytes)
Hash
d42d0ddb4d1cb8a5f4312b3dca0c19ce
d55a5a0333f739be3d4dd89ce5e5747e53b451b7
4d1ad0895c520cf08837d57c4fb47695a9201d710f90f15750b67113831eba5d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/infinity-wallet-48e78bc97f96bad14ee6b781423a69ea.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16780
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b47d58f09b3abe932b0d70c627ca5ba2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9PL3x8I%2FCdtqEZKX9%2Fn8uFXax%2BCbdJila8yv6svt9gdqAAVfpc9okTi9NQlMMObqNZ6oTFVtwn2UHwSZieLdGvMXQbckwjLVLwLyKmfAl3gITn5sslZXP1dGmQHb22Nv10oAH9BHj%2BnHPQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f38569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/ownbit-0b6b21e40acf2fa0f85d2c5ce38c4c51.png

188.114.97.1

200 OK

41 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/ownbit-0b6b21e40acf2fa0f85d2c5ce38c4c51.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 532 x 532, 8-bit colormap, non-interlaced
Size
41 kB (40585 bytes)
Hash
e8315763d1717aeebd75864bfe07d7d2
d78755727d54f4c0cb25a24a4907571d9d5850b7
820ce188e231cdb04cd4a1b4b5f66babc0690a730914a67535d5752f2a53fca6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/ownbit-0b6b21e40acf2fa0f85d2c5ce38c4c51.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 40585
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "20c3745fb0c5b9e0c29ba0591c09534a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0uQhwS5GP8TzAP1jqLLPRy2S9pMVgBSVR0wA1Lu5e7JLe5AF7z%2BWoX1pWJPkQG7F9DR4W%2BoIhoCzdl7NJJzoimJBk2Wg63YCTrooWCfw75kB%2BsIvCpwnym0anLVp%2BJCKfnAHckmWUJ5bPw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f3c569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/easypocket-436ea3270a7bf77c02a880bfc70d0ee8.jpg

188.114.97.1

200 OK

5.6 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/easypocket-436ea3270a7bf77c02a880bfc70d0ee8.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3
Size
5.6 kB (5625 bytes)
Hash
7de1955aa2f99c18e7cd406f13acfe01
74b84eb6f355cf673db6ba3ef82ae689a648ce42
7d1f310427268c947d775c0446b1ef416ad38d43a98dc7aeb877e56c28c044d5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/easypocket-436ea3270a7bf77c02a880bfc70d0ee8.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 5625
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "40f08a078ccda22ca5814fd4d56ecac6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gcQo0YkreR85T0fHn8Q8Fw1gyx2LduFxNReogA0ORBnGh4NejYBo1rhnSXlYJ8bAfrTplNwmpGuNK60IHKoZESkPwmykLDsd97UjET29Sdr6A5jdzV1ziUk1XJ%2FYvRBD%2BiXfMHl6D12jQvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f41569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/sparkpoint-5c0d3a4ab850a7ee2a3f03e215b68f2c.png

188.114.97.1

200 OK

17 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/sparkpoint-5c0d3a4ab850a7ee2a3f03e215b68f2c.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Size
17 kB (17260 bytes)
Hash
ca3fe0eed06b6231639c5ee96fe85bbb
ede1e38841e18072b65b0c4160bcb99272b86ffb
501f77f1bf6b2df8fb07504bfd369de4406276e886ee1c4b2adadf5dd11a34d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/sparkpoint-5c0d3a4ab850a7ee2a3f03e215b68f2c.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 17260
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "eb6318ee01572324c965ad58c8b2e3e2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ezS5b%2FICjKAeiiEH3qIq0DAsHsN4ZVOxR4qPSkivsU7Ylwqm4X6Y1Ie837QTdoptR9UnIB5H0McTU%2Frg948BGRh%2FUB6fhmfRzx%2F00p%2FbJp92cH47SUjK92BAKwW%2F4PtQx6ifa8zw8g69VWA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f43569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/viawallet-ae1502eddf4d2ed89abd36907dd3ae8a.png

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/viawallet-ae1502eddf4d2ed89abd36907dd3ae8a.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced
Size
11 kB (11314 bytes)
Hash
c8b38eaa1c15a39d22e66b29fbb31b02
3d6791b76a2fae2450436a00b9cadf800acc2db1
84a278ea7d8477744a805fa935bda7e8ede51e7c39b5f4ba193a784000ce6471

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/viawallet-ae1502eddf4d2ed89abd36907dd3ae8a.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11314
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c1e15858b7a13825f53f39fda4262549"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=co9E00JyDRrIJXkjZu4OIGE97cgSeFhbsFQDv7pLmbb%2Fwk8HiThWFl6Nmeys%2FCGbsKn6jNRCs8KFszo8c9grr1TojLKQRjaH9%2BKOZPqrDidkSXOWY7o%2FUGR7UHIXt82sixiFQUqNkq7xM9c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf48569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/bitkeep-387b0ca7da4cf322f44c70c23064c529.png

188.114.97.1

200 OK

7.2 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/bitkeep-387b0ca7da4cf322f44c70c23064c529.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 400 x 400, 8-bit colormap, non-interlaced
Size
7.2 kB (7226 bytes)
Hash
baf9f6d8d1b4ae2b8e085edaef7629ee
d6906ae73610f7679495760a48a82e705b5257a6
4f1047f6fe8115cecc59ad226c8714d496446f564703f6c6128dd28168f89fd1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/bitkeep-387b0ca7da4cf322f44c70c23064c529.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7226
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "530f6d39722f1b25945e5ba5b90995e7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bE0z%2BMpOLbQZLAtkJ4Q6QHIEwyvJsUpqExXMGkG4x5cLSX%2FCAy50HP%2FLwA4o%2BVyRWXvokoAU3wnwBPa36nNMT1HQ9aiHw3jI896Vu0P%2BtT7MTSWiit8ejZKAr5fj5vCYdkrsVSIXXR4f020%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf4a569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/peakdefi-2e1d4f97cc1a737a9aa765b3748ff315.png

188.114.97.1

200 OK

9.6 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/peakdefi-2e1d4f97cc1a737a9aa765b3748ff315.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 250 x 250, 8-bit colormap, non-interlaced
Size
9.6 kB (9621 bytes)
Hash
5977ec47a88ab5335ff142753d995494
0773cefb903c837d860cdd2e6a31545340e22c24
14ccbc0661aac1a3a603e124e1bb4e951968dd0171f7006182dc868ae85c79b8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/peakdefi-2e1d4f97cc1a737a9aa765b3748ff315.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 9621
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "9cb276f0bd7f0e810343f89babd07463"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xKP%2FSXMqMTGNKPOhPtm%2BW5vMoQ%2F92h3U%2B6PNEle93OGPrGYSh6nwvEk7LkqNY4AA%2BbvIMo0LShfFN9ofrzbUVxFCrjEf9KWPHQX%2BsLwNYQQg8qlWxMet1rySSAck2ts%2F5COadRRsrkRn4uI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf4d569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/meetone-01093db7d99e3e6cf5cca68b616f8255.jpg

188.114.97.1

200 OK

18 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/meetone-01093db7d99e3e6cf5cca68b616f8255.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3
Size
18 kB (17624 bytes)
Hash
f2456ba68e1bdd5d53dd5b5eef562921
0d32bff54274fc101bb0888b6db8d25c4def0945
2ecb5d0da52ba47ba519a3573e53811f3ea819d84d2d8d92a581aef5c100be49

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/meetone-01093db7d99e3e6cf5cca68b616f8255.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 17624
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "48938f42a34434616dd625ebc00303e6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EcUxTiaUFV4ZTwTSjZnKq5EsPjGudSE5GUbN%2FqgAGkquJLB%2B4ZMaWpeLq9WBLO9rSaQu2%2B793%2BYWqETaz6G3FlLi6b7Z4IEV6LmNglreWYy0rWhYJHDyno1ctnSSEZSiGufM6lV6dDKMgg4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf58569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/dok-a32c522e109217cc2a1a2a310f3c9bf7.png

188.114.97.1

200 OK

6.0 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/dok-a32c522e109217cc2a1a2a310f3c9bf7.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 460 x 460, 8-bit colormap, non-interlaced
Size
6.0 kB (5967 bytes)
Hash
09b986ff5f0d42dbb6d699f4346a8e96
daf24f272a2e893771daa66fe3ed044b6a6d56ac
5d37ac28f1a68ef5350099437f75851fd8c97e3bfb49fa78d2f6e57f856c792d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/dok-a32c522e109217cc2a1a2a310f3c9bf7.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 5967
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "eb8c0a2b543b3ff15dab848ea148b1e5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cZ7%2FaMr6GHSaScinF1MM7ISis8sd9CgNzBfooZR95XNi2RJ8AR21asbKEntcqXd6THGzwGKOy3uHn12dl7BsCfJJ5c2cFYE0jXh3ud6sJCxijAV4mtH%2BjhqcReeYHTZEPbKfUs%2BooEWVD0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf5b569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/atwallet-2611d814a50a964b89d5f8bc1e5cb3a0.png

188.114.97.1

200 OK

17 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/atwallet-2611d814a50a964b89d5f8bc1e5cb3a0.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Size
17 kB (16957 bytes)
Hash
c74318ffce0700799c6d01663d6a991c
d8439428dfbf0cc8ae284fa1bcfd2d0f1b24246e
627aeea61959b31a6aa6f5d3bc454e885935b8de00b3cdfc856bca95619b4859

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/atwallet-2611d814a50a964b89d5f8bc1e5cb3a0.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16957
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f593f3d5e2df9e0072290111a842f282"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYIv%2FdULVDrJAAqb8zl1yyr31GD5C3uhl7kop3szoGuJnHXbn74buNA%2FEkSBn%2F8FUydCiKXxLe1XKA7i4zWEfkKV%2FDNuskzye4T0S8Vb%2FeUyXpB7Z%2FnX0fRMEi8KPlh%2FIsfJnsK%2Bd9ywjPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf5f569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/morixwallet-aa7d607cf9ad52afeb3b7c83e5f34eba.png

188.114.97.1

200 OK

23 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/morixwallet-aa7d607cf9ad52afeb3b7c83e5f34eba.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Size
23 kB (23228 bytes)
Hash
fbb73aee20a5a62f0d3194549d1f540d
b929ef44db26d0c4c7b3d05c14abedbf7216d014
d5434779dbda107074254ac1d5796197c5611f3e9481d45dd2df52d7d85c6912

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/morixwallet-aa7d607cf9ad52afeb3b7c83e5f34eba.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 23228
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f7ac4ce400c22e57284959ac2e250a9a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=phbOGOP5Poq8zjs7CtIsKwH1JMP%2FWSXofWlQU%2B65xmCxbwJ%2B8SuiQ8FNgmNBqv8OlvK2RCHXugC%2FecJyeN34vSK6DJGOlNFAfSIjHj9dXSlqcZ33vnUFouuksdffeRbfeaMaKtyXizDsirA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf60569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/midas-wallet-5c5057d972ca621414f077541845fc61.png

188.114.97.1

200 OK

10 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/midas-wallet-5c5057d972ca621414f077541845fc61.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 916 x 807, 8-bit colormap, non-interlaced
Size
10 kB (10149 bytes)
Hash
13b46b98fbb85588726598c62944c92d
8f7e333344d1e44edafb88e5d33f27e9d8b34c9e
55f5e1cafa6d56b09610509f452f993c3f2f9b0dac1217dd3245964d9e03e79b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/midas-wallet-5c5057d972ca621414f077541845fc61.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 10149
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "98fb15a1c9a058d285fb3f29ba285f19"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Pq3rF6cSqqMU5PtrztXs9%2BzxLaRRR7Lx7jPmVcFV2VG2I1W6CzHAU8GF36fZGEBGqLfhYPtWhW%2FxZdqkUDIcUF6Z%2BRhhxpB166r1zgv5Dpc9bbu6k%2BHuLCr3bmvv0ImBekL8YYi%2BSXQ5iA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf67569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/bitpay-1573dd6c95eb38386f181048663590d0.jpg

188.114.97.1

200 OK

7.6 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/bitpay-1573dd6c95eb38386f181048663590d0.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3
Size
7.6 kB (7554 bytes)
Hash
5c1f0b3baa9072f7d0d76066fa67cb54
f5ec960f111ef16ee27b1c1e1b4a0c0b4e530c17
6a3def54dde9303756979ae76f8f310509488bb9559be873c54a4ca4bf23a8be

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/bitpay-1573dd6c95eb38386f181048663590d0.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 7554
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b9fb64a925419d2faa89872fe262d6d8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VFp%2FEq%2F4%2F95HzNlw6QOuFbeXbUKALP%2FvBZcrSGKFFAmMXwHSm3ALizTCbIKBAQ8pUxSENxP%2FlifosGyh3Uz3Dde0asGYSfEY5%2Bjs4opLMfyVn%2BMhYNDilMNTIcyexZIhNcdIWwQMVDMbt5U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6f01569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/mykey-7419df5270c0406c80cba19fa5165923.png

188.114.97.1

200 OK

7.2 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/mykey-7419df5270c0406c80cba19fa5165923.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 400 x 400, 8-bit colormap, non-interlaced
Size
7.2 kB (7192 bytes)
Hash
c62edd4dd8392f1d69385ef8e92e3a0f
fd35d200521818573aceabc9f199cc8652cbec82
4bdc954d148ff3602de6e063814d9104faa7d2ef8d0cd9592fc2752be97d61ae

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/mykey-7419df5270c0406c80cba19fa5165923.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7192
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6b5d12923a41d8a441d8a64a1e9530d9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BIubt2o4uW7q87oU5%2FcAgFnNLxX6n25x%2FfFY2g7DkoTgMG1Fgv7W9a2XsKi2Q8hsSHArmhqVtSQkwagSd6%2BMxnmVugP4NJFnLZ2FPIzvSZIFZh1rCRYuZuAapah1lk9t1wzBG1dTq2LJNjo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f14569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/trustvault-9031a67f82293fc50ead978f936cfff3.png

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/trustvault-9031a67f82293fc50ead978f936cfff3.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 900 x 900, 8-bit colormap, non-interlaced
Size
11 kB (11036 bytes)
Hash
99334068bec9a6b45932d401f7afaa6c
bfca20025e7689fe4f269d3558ce809eef0382df
c8cd51c2b6e389f70a3dac8e163d106a3bfd6d9d19a91f76548c02cf33aeac19

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/trustvault-9031a67f82293fc50ead978f936cfff3.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11036
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c3b8b3ee22932f8403644f8d960ae62e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hI7AOiAYUYUu97v4OPvueahQXCutPnYjERAu9nznt5iRqYCEXOvEeKEF08pJ0Ooskfm3lQryCQMPgJIb1a5%2Fh1gM6KLE48GZ8EJCoy0my05UTwAvAyHp5Bp8Q6kj0%2BMrpuSSnCjxXkhehp0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f16569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/coolwallet-s-cc612ee7a151c1863293fcc69dd0f677.png

188.114.97.1

200 OK

4.1 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/coolwallet-s-cc612ee7a151c1863293fcc69dd0f677.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 346 x 346, 8-bit colormap, non-interlaced
Size
4.1 kB (4064 bytes)
Hash
ab8305fccae0ad703631eb8edd7432bf
f1cbee5fc46ba2cabca26357cc00c999d0edf7d6
3d259a231e036c77da9eb5def6ce778085eda636fc627cfdc608b3eaa9e9f804

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/coolwallet-s-cc612ee7a151c1863293fcc69dd0f677.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 4064
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7fcf4ebbf5092489fb021e9d9e116180"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hvcvidXIE7ypF%2BTBlWrIKNLdn0dA7MM9m%2FRI0MG1T16rbnNQ01NNz%2BPYT2QYRgFm8yGVglOdyk4gBdAwmmMLdRwJzfAv4irzUb2dVZrLtr8knGoU2eVwcNYl0pgSISyIYW1LhxBSuh8lYiU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f20569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/gridplus-8cedce167d37ddaa02f2afdf55841d8c.png

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/gridplus-8cedce167d37ddaa02f2afdf55841d8c.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 400 x 400, 8-bit colormap, non-interlaced
Size
11 kB (10787 bytes)
Hash
7eb9fb15a7d94157d461824e8c6c9fe4
0f10545dd2d557171450e84343d952c45f93123b
1aa5719d35592a108d797be1d29cad8b08a9f8741ed5fd1df611c95df088b1b7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/gridplus-8cedce167d37ddaa02f2afdf55841d8c.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 10787
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a24fc1c2b2f06f337c02aaa730fc3a48"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8pcLZR11dQJb9JcLD0DQpIiAIv7CxHK2%2BZW6zuarkeYzwFo8EQ3YP2VDZk8gO8gf%2BHUIeevGUjh3fg%2FrGWMBNCi821TQSqS0cJpCHs0SaWNEP1oKu%2BvtrAFNn%2BTxkdBr7XQ%2FHSwvq752Xo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f2a569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/safepal-1022b40e2ea3a4a6bb19cf6ff28d8b92.png

188.114.97.1

200 OK

17 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/safepal-1022b40e2ea3a4a6bb19cf6ff28d8b92.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 338 x 338, 8-bit colormap, non-interlaced
Size
17 kB (16695 bytes)
Hash
3eeb70e42da8860540cd540f5565909c
42d381e05b34f7e86e56a15204d81792fdae6a49
85da9acb383b073e3b7192692307cbec8226bf87573da4f345765f03010fa678

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/safepal-1022b40e2ea3a4a6bb19cf6ff28d8b92.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16695
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "da9735f1e1ee8d2b2482301d12179240"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lIXS4XVamwg%2Fx9suClekyIYNMmoAuySKcSa6nMGMwXMLThLuV%2Frks8CP%2FaL59gavQmyO0SkbPFLXodUCxMeamTNZqatXvWSmHN2FRlUnFtlc1BaZ%2Fv6Hu5ri6Zs8X0znxdoFVKfkEVU3Vz8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f30569c-OSL
alt-svc: h3=":443"; ma=86400

smtpjs.com/v3/smtp.js

109.169.71.112

200 OK

871 B

URL GET HTTP/2
smtpjs.com/v3/smtp.js
IP
109.169.71.112:443
ASN
#20860 Iomart Cloud Services Limited

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectsmtpjs.com
FingerprintEC:83:1D:D8:A2:64:CE:2A:CC:AC:62:79:7D:42:09:D5:21:4E:8D:05
ValidityTue, 09 Apr 2024 02:31:24 GMT - Mon, 08 Jul 2024 02:31:23 GMT

File type
JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (841), with CRLF line terminators
Size
871 B (871 bytes)
Hash
3834e1b9e65ca954b7479464ea1e5118
437df45dbf59c3a3414236f44e3bcd5045bfe314
fc33c6b2c79aafa930e841962ae3c25bf8f56cbc20ec48fc2b0ddd0aa6ee23b6

HTTP Headers

GET /v3/smtp.js HTTP/1.1
Host: smtpjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 15 Mar 2024 10:08:42 GMT
accept-ranges: bytes
etag: "b65c4ac2c076da1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Sat, 20 Apr 2024 16:30:35 GMT
content-length: 871
X-Firefox-Spdy: h2

appsweb-server.pages.dev/wallet/static/vision-928292fe642172a18e62feb5eaa2d639.png

188.114.97.1

200 OK

93 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/vision-928292fe642172a18e62feb5eaa2d639.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Size
93 kB (92570 bytes)
Hash
3b090704566275aaddc163286674d259
b34308c27d71a60099928a295cc325b693ee3255
9843c186d2321c9f833fbecbf153a22b1e7644960573f5e8b95868cd3401a61f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/vision-928292fe642172a18e62feb5eaa2d639.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 92570
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2c064a24d22ec3cb1f62c2624c167c3c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfzc5qHYLmua7lTSVFR7p4h%2F7PNTKAZHx1uQmF8r9IfNiTgQF3%2FzY3pt%2FWJUN9vMqzC3qNtHgztWKRLufwnoYx%2FgRX9QVFA6UJROAwZizzyKc7DN3aATBbNvZEzHJ6USbjBwwhQGrGT%2Fwys%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf4c569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/unstoppable-0d3474dcd7572ac2080b0f4ce632dfac.png

188.114.97.1

200 OK

6.6 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/unstoppable-0d3474dcd7572ac2080b0f4ce632dfac.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 320 x 320, 8-bit colormap, non-interlaced
Size
6.6 kB (6558 bytes)
Hash
d01b142caf1f55bb8f9130b14401bdf6
af0440ebd1b74e7a567b261a917cd25f51a69622
ac4dd9c4c99afaa2c2ef08c401feeaebf3a0ceac2e6cc01289daa67b5ba9ef62

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/unstoppable-0d3474dcd7572ac2080b0f4ce632dfac.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 6558
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8852bfabe3cc3ce9c362b68d02425020"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3idhUlh%2Fcgfv8FqvClHeAHIKW%2BGpQGgOCy%2FdBuKshwdzBgdtoFUwS%2Bt450r8U0N2fCoQoS0ZXjysjnrkkvbmIXzfIO%2Bp%2BH3LamT8Ip4nKBPj58PRUsQIH5ZV2%2FtwperO51w7wHpfIT5o3cQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf55569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/xdc-9a98bff95dffc41869b8e77912a6cc54.png

188.114.97.1

200 OK

12 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/xdc-9a98bff95dffc41869b8e77912a6cc54.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced
Size
12 kB (12100 bytes)
Hash
3422f769d0333523b8de1783c120dde2
1340bbb5612f944c0aa91b077b917d3621251518
71e8e7be4ca33f76c3fdcc4e901b5122c803a38839d991bf85909931ae3263df

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/xdc-9a98bff95dffc41869b8e77912a6cc54.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 12100
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e37cfdc50461215094fad951c85c9614"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FgqBCuv1J2tjleWrk2RZSYlcVdqI8zFv0fq0sJwtJUFbT4Zxh9f7hauvPk31TKpigDBeHV4U1almH5b5BhQ2yZfs03k1mB0Q%2Bg6Cox9Be1R%2F404IcShCFrVrgeLN3IPU41u1kxV8%2FyMS8Zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf53569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/keyringpro-830b2c0ee1db401dd64c2899eaf2adb3.png

188.114.97.1

200 OK

26 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/keyringpro-830b2c0ee1db401dd64c2899eaf2adb3.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 900 x 900, 8-bit colormap, non-interlaced
Size
26 kB (25892 bytes)
Hash
73de0559b186341586412385e3fd1443
3aa91ddd56d71047ad43cff928f1ee17c074e50a
7f926b400154c1118a0cf47cf0b18ccf973613336419466d61d4f4c3a1cc3617

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/keyringpro-830b2c0ee1db401dd64c2899eaf2adb3.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 25892
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "3cf83f4d56bba341288c869488d47305"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gq%2FD5%2FaWOfghV%2B3V0ZG7V1vp1yRVlAymRrFsgkTQOuI5IxtaDKcxmkWjkxBNUIMjOk9r9ZnVmfBCfsPGnO7Rf%2FarFZI8E3CPVhrGhGuj88RNSUa3FKc0gdAMqw%2F6Je0GWIFmOvei8f9bAao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf6a569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/atomic-4c02d2b33cf091fd83c7a49819394e41.png

188.114.97.1

200 OK

123 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/atomic-4c02d2b33cf091fd83c7a49819394e41.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1800 x 1800, 8-bit colormap, non-interlaced
Size
123 kB (123157 bytes)
Hash
5615862ea7831a623e802c7e0e0aa088
dfe853ca3a4d56c25e88eef043cb8033dd614199
b8301578f01f78cb9b3a609ac8fb0b920e68422115476c9dfa3ce15879ad5625

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/atomic-4c02d2b33cf091fd83c7a49819394e41.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 123157
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d19bb5729c7351954c946dd45fe65bea"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BorHcplQcGBczh29r1yLfYL789uZdCIv6fz9ckgDg5WiSfx%2F%2BqC1rHNxP92XO1rLWhNqwobz9u%2BPTCRmrmusMLe5%2BvqPC%2BgWtuQ8wv0AkgipjVpaHATK6slg3uk9oTgdBKAfHkfxH7Lq6sU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f18569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/js1.js

188.114.97.1

200 OK

1.5 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/js1.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
ASCII text
Size
1.5 kB (1496 bytes)
Hash
15e1fdc42e78658a13568f7b1e35fc77
20652fe69d5d902bf95f91582087ba61d705666c
e7d7ef7e68dc4480c2437b7a20a9f93dd5cdc5c3287cb3e157a0505812b3abcd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/js1.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2231e5c3b0667bb9768263f4eb183c71"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d3kOTPeflTgJNngmaYtijjME898nGhgIuQvSrrvXzk%2FIi6dWIgBYotI3OAl6OALjDMyZl8TjRhH%2BX3i44ZVl5Puy%2ByNnSQNAQ9ZmxINUYhrY57kW6%2BMxEJdnGeGfzZa%2FJb2O1eIvVOjhgKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf94569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/dmsans/v6/rP2Hp2ywxg089UriCZOIHQ.woff2

216.58.207.227

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/dmsans/v6/rP2Hp2ywxg089UriCZOIHQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18076, version 1.0
Size
18 kB (18076 bytes)
Hash
ad513518b8de790106aefb37f7304835
c0f06121be08d11af3437bab4886a700c3c15f56
951a3b8ec1c6a0ae2767a3bb90ba6995397c5d13bd7ff79ea0bc87529b8024ea

HTTP Headers

GET /s/dmsans/v6/rP2Hp2ywxg089UriCZOIHQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18076
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:54:31 GMT
expires: Wed, 16 Apr 2025 09:54:31 GMT
cache-control: public, max-age=31536000
age: 369364
last-modified: Thu, 05 Nov 2020 22:00:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

appsweb-server.pages.dev/wallet/js/js2.js

188.114.97.1

200 OK

3.7 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/js/js2.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JavaScript source, ASCII text, with very long lines (342)
Size
3.7 kB (3731 bytes)
Hash
4d13047b1374a60684455ac688113669
68a84415438d070c3646ae61061b432f3ca87927
de176b77d7d458466ac0ac010cac961b3903341da7a35ad4ab5673f270a3c284

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/js/js2.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"eff735b4a642f92fdb97f8ba0406ca96"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zY5wWmt%2BflgbxTlgwif6AzkJ0BQX86lXhGMFVROQl5v%2BxKhsOFWjC92FwUSKWpBsv%2BGHwjTmIYlaAPlHvO2YjHk%2FyyAVKOd5twV0CUpjCyf%2FQIHxk4j1TkYyblXT5HBTgD%2Bk1nBNS%2BK3uaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf93569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriASitCBimCw.woff2

216.58.207.227

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriASitCBimCw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18244, version 1.0
Size
18 kB (18244 bytes)
Hash
171ccc885c8deb88a0f3b55096584514
508db0c1eaca7d0d4af54598d17e57467a8d503b
a8e5a0c39f7371f633203c6e77de59b3fff273bc2c1a5df9c1356e6dc24ad92d

HTTP Headers

GET /s/dmsans/v6/rP2Cp2ywxg089UriASitCBimCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:46:34 GMT
expires: Wed, 16 Apr 2025 09:46:34 GMT
cache-control: public, max-age=31536000
age: 369841
last-modified: Thu, 05 Nov 2020 22:00:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriAWCrCBimCw.woff2

216.58.207.227

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriAWCrCBimCw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18296, version 1.0
Size
18 kB (18296 bytes)
Hash
fde3d0124cb7ec9415ce2b8ebaf89118
ae93664d7ab4ef117c6171cd6c0ce13d29637b72
8d3411c961b332008c61452f483ada3da4cd0fd06cc264c7f2facfb01bc4b1d5

HTTP Headers

GET /s/dmsans/v6/rP2Cp2ywxg089UriAWCrCBimCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18296
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 03:16:22 GMT
expires: Fri, 18 Apr 2025 03:16:22 GMT
cache-control: public, max-age=31536000
age: 220453
last-modified: Thu, 05 Nov 2020 22:00:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

appsweb-server.pages.dev/wallet/js/js1.js

188.114.97.1

200 OK

1.5 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/js/js1.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
ASCII text
Size
1.5 kB (1496 bytes)
Hash
15e1fdc42e78658a13568f7b1e35fc77
20652fe69d5d902bf95f91582087ba61d705666c
e7d7ef7e68dc4480c2437b7a20a9f93dd5cdc5c3287cb3e157a0505812b3abcd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/js/js1.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2231e5c3b0667bb9768263f4eb183c71"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8VZWT9ek4%2FaulynB8J7kGx9bS0sPEtCxuNJ0z8AMwzYmU6JW%2FgSvN3CCRP08B9OdzHQoNroyJiPoH%2FeGEo73D2fCbfuYeprP7WwW92daAH4AAu4RnYrt6ABL7c%2BWwePxSp4NFDgQO4Lgi48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf90569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/blockchain-logo.png

188.114.97.1

200 OK

12 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/blockchain-logo.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Size
12 kB (11781 bytes)
Hash
335e0da6439d61d0f94a913a67707c71
c45fb1d7a6a6fd7be7928f565910aa6e913f5690
7f8ca27957b9c11eb5258bc322ccfe39c1fd540886f003650c228b20613a4574

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/blockchain-logo.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11781
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7edce981bf2ca6edd2028d3da39afa47"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iYtbqL%2BBf3oZrA%2FAS%2F2H%2BsDrD28nSE1e3SDtYhsuU4cHMoiAj3Kc0r3qRtpGiSckrKeMINWu%2FyAnE%2BqPsetv2XcdD6vVcCItHCTn8q1oI0MalUFxfjHA7bWnr6d5UA4UVKXZHNhgwHx9dHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf72569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/aktionariat-c5784b26234a389632687a36d2fb3258.png

188.114.97.1

200 OK

26 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/aktionariat-c5784b26234a389632687a36d2fb3258.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Size
26 kB (25942 bytes)
Hash
e8e7b60e78fc0239336f5188667d0281
216fb719dc1e60ddf159f58af7a8f27bebdbfe85
8b2480d2c4cfbec760ef72c539d35415d27d11ab0d8bc719bdb7184b86b4e05f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/aktionariat-c5784b26234a389632687a36d2fb3258.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 25942
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "eece775a4f5adea57e34b4cf98fec694"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gieewZ0dt26W665LCxq2opxgho1DJULWsC1%2FwvNN20RI%2FFwKB7tXFIcXLLGzgooOf51Q6gPZfKmrywSk0VM7mbIPxzeB3A%2FtR4%2Flna%2FmO9KY0li7OWzwa9nVDc5XuVMqoqfIIKfnagOyPgY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf74569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/js/mine.js

188.114.97.1

200 OK

4.0 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/js/mine.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
ASCII text
Size
4.0 kB (3989 bytes)
Hash
457e9c039158f3a3ae3638115ba70935
9f4bb4fd77facbaef765c268eb9ce6f6677a5ff7
662bb9c9d16848a2cd955188415e6a9ef75fbd44a3711e2fddd72d6482a6b147

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/js/mine.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a8ef0938a7a9559b68b747503c14d685"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYbgz%2FmmV0F9m9pMHGskGOSY2whm4k8na0%2FYnC3Rh%2F810MYguoYrb6YkNJfMflHOeSqrZ1g29lq5IAgYvO8hLdOZvRTYm2zHFV2WkM3gjbxJoppFG81gk2Hq2mFUPa5GoiQwVQLo8J08n0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf85569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/coinbase.png

188.114.97.1

200 OK

3.9 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/coinbase.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
3.9 kB (3909 bytes)
Hash
8fc1b156c624ee737969728f3640bbaf
e8f8084084e5dde2c46c2874bbe6c334bcdb1224
bcf95dc014e01231fed00deb5f23dc0ca84fe24775ae40c105870adf29442674

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/coinbase.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 3909
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "637bbe81d6be1d3eafa70c42fbd77706"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kKGU73MiOuqXNm23OK5wk5XwceMRmsmvdoqvaPnfp4Z00YvBrTk4%2BiS4qpPuyIBKYuaQJiaAXTAvI9WsktnVedai8Had0ZLxOVHsMy9B%2BpqKcF2P25dGhpHCQmAe5g2gyQxZCzVfSvoloWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf78569c-OSL
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/static/images.png

188.114.97.1

200 OK

3.1 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/static/images.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
HTML document, ASCII text, with very long lines (331)
Size
3.1 kB (3082 bytes)
Hash
4c1920da7e5d9180796a7cbd50c058fc
ebc6858e8987cdb52fd011a29a6914f65e753a3e
69e48d9db7c27991e0dce1a56f246fec93363cc286c71e6160282a31bf05e867

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/static/images.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 3082
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e83123d19411cc1895ab1e692567c409"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RWZKoYrpfCIM7TDrhu3JxvrZJEdWTkIZWu7Irva8GZCOjghT8kxpv3cZ7PS%2FiY1spu%2BWPIO8cbJ2WjTVRYfm4oXuQgVTsD8WdUB%2BxTDQgsRPgC3RBjdU05EiI0vSdLIKMkWDo%2F6lH6zMsn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 877685108b76569c-OSL
alt-svc: h3=":443"; ma=86400

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=b_Nexhha7bgdPzoO_CaMvHDKbcawh3w-cGjnv7msevcE_GPVB45unfQkbQMZpBwIxAOC5Zg4SefHtYhJVDCvkWYXEjTe_fq58g7RXq9PSr3Dc-0YQvU4L16oOK3UV4we
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
date: Sat, 20 Apr 2024 16:30:13 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 40
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

www.connectwallectsonline.com/page-data/apps/page-data.json

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/page-data/apps/page-data.json
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /page-data/apps/page-data.json HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

www.connectwallectsonline.com/commons-728581910d6e685fb39c.js

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/commons-728581910d6e685fb39c.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /commons-728581910d6e685fb39c.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

appsweb-server.pages.dev/wallet/js/app.min.js

188.114.97.1

200 OK

536 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/js/app.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type

Size
536 kB (536373 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/js/app.min.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"fbde0dd0853a524bd864bcbb0a4e3d64"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7YuKYPoDWUKIodxQreHEjoHy9LEUld22vMhGmODTclqjkkFFOCCqRsU7mSdp78phuc4LRCYDuA%2Fl8%2Bg5%2FGN6g06TbgTbiyPQ5SB6XCY5rqVPWGN9eJZN3orobeHSTakvroeafWz9Q7aqkow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf8b569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.connectwallectsonline.com/app-2b5a75f35e7d5a1e67ad.js

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/app-2b5a75f35e7d5a1e67ad.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app-2b5a75f35e7d5a1e67ad.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

www.connectwallectsonline.com/page-data/app-data.json

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/page-data/app-data.json
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /page-data/app-data.json HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

www.connectwallectsonline.com/static/otherssss.jpg

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/static/otherssss.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/otherssss.jpg HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

www.connectwallectsonline.com/webpack-runtime-08a0e953018334063ddd.js

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/webpack-runtime-08a0e953018334063ddd.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /webpack-runtime-08a0e953018334063ddd.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

www.connectwallectsonline.com/framework-8e528b732ab2eaadb7b7.js

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/framework-8e528b732ab2eaadb7b7.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /framework-8e528b732ab2eaadb7b7.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

appsweb-server.pages.dev/wallet/inputs

188.114.97.1

200 OK

525 kB

URL User Request GET HTTP/2
appsweb-server.pages.dev/wallet/inputs
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type

Size
525 kB (524817 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/inputs HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 16:30:34 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1c9433338d7f22c53264d0cf91d1f698"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UfV%2F58Xb%2Fnj%2BwLG9TZbOYmFgtIUvYcxb7fVd88EExy2SpVYkXhfsYCzwxghPcxw0OBcMjrCmwkuIzdMY6%2F3%2BCU5ByLbMDR0EsxgnbfcqGao2JbKAF%2Btbw0lTmzC8AGXC2TGLwxGAVR8bAzU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 877685095c7756b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.connectwallectsonline.com/component---src-pages-apps-tsx-50d212c53780f4e2ed64.js

0.0.0.0

0 B

URL GET
www.connectwallectsonline.com/component---src-pages-apps-tsx-50d212c53780f4e2ed64.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://appsweb-server.pages.dev/wallet/inputs

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /component---src-pages-apps-tsx-50d212c53780f4e2ed64.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

appsweb-server.pages.dev/wallet/js/form-submission-handler.js

188.114.97.1

200 OK

3.9 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/js/form-submission-handler.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JavaScript source, ASCII text, with very long lines (4002), with no line terminators
Size
3.9 kB (3868 bytes)
Hash
53e27959e64975a35aaa9f039b48e9fc
240fce62d18c9353f54a52627ad0eb918e0adda3
a4385aab7a2b12e23b2e0d5ee7b3feb3dde27f6436fd2425f92e7eaf9862b90b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/js/form-submission-handler.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1a2398e59f8a53b7548a0f5349059312"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHSp6sSGsmLsEpwKVKVW%2Bfqk4Z%2FUsFze4pGxpfOpjiwODna8GFoYmuw%2BpfXNgnvvXdXo%2FxssbBDhPyZxpBc9EwbBic2J5EHKhR5MXzJG5w6NAEvByRxbQp4mLs0cL45DE9mnhM8hsfB3BF0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf89569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

appsweb-server.pages.dev/wallet/js2w.js

188.114.97.1

200 OK

5.0 kB

URL GET HTTP/3
appsweb-server.pages.dev/wallet/js2w.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://appsweb-server.pages.dev/wallet/inputs
Certificate
IssuerLet's Encrypt
Subjectappsweb-server.pages.dev
Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1
ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT

File type
JavaScript source, ASCII text, with very long lines (5237), with no line terminators
Size
5.0 kB (4958 bytes)
Hash
a4f3682f91e05055cd198823b5127cfc
85b66bb9435175156d938e8bae9553f0b148deec
c10227c28bc4446faa129644b5420861ed4864a85aa3c050af088fa6f49aeeec

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wallet/js2w.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"eff735b4a642f92fdb97f8ba0406ca96"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2BIe291GWqc5b9Ardd84u2SuSsTznHWV%2FX5teU1ItqqMUjypMXMTS8IRBQgcIx%2Bi45nEPumG%2F5NEcN9WEBTOrW8AersXIrixXCpWYlrjZIezpm1m3pgP%2Bk0aogpfxH%2Fju3BSfT3%2Fn19lqdo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf96569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML