{"report_id":"0824aa10-ef0c-4ec9-a7a0-a43c95eebe49","version":6,"status":"done","tags":[],"date":"2026-02-11T10:30:05Z","url":{"schema":"https","addr":"hederawallet.io/","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":0,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hederawallet.io/","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"title":"Hedera Wallet | The Smart Way to Manage Your HBAR","dom":{"size":37465,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2656)","md5":"d38bf5c5cbe5b246eb292b48b08453d9","sha1":"d6dee3c1882754e88ee5f7fefea0af2cc7785b8d","sha256":"15a27e41208f091861a92d7b24cc03751e544dff472ec2e1a1ad08d8295ea783","sha512":"0efb0d889600fd54e1b47e1871177ab77ae10e4334b222cd11f7995548053b3a0e2d9dfac534b55ad66cda73fb14fd9af4b16d04c33e5ce36ee80b4ba0eaaffd","ssdeep":"384:RKE0R8aKmmKmIZLLNQVRwjYtOrF3Pimr7Fq63PIBqrRN3PiVr4rwgsxKrwpt1c4f:IE0nLLYQec4Gj0WgoAMz6BAI5vD","tlshash":"c2f2a475238c6cbb514343d7b66172e960af4cb7eb239151f2b7822852d3c91ca3b4a7","dom_hash":"domhasha67e57849edd91a85b64b9b05f4d403f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hederawallet.io/","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":0,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T10:30:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hederawallet.io","ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2025-09-12","domain_rank":0,"first_seen":"2025-11-25T17:22:48.355839Z","last_seen":"2026-02-11T06:50:11.231792Z","alert_count":40,"request_count":10,"received_data":330281,"sent_data":4501,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hederawallet.io/js/app.min.js?_v=20250915172059","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcdacd4bf6c341bf3950bcbdcb32f06f","sha1":"003e04e103dbccd37a4ddccc1ebd6ae5c32ebc04","sha256":"38a5acad54b11a36dfe1c34dac564c0795da4a1e56bd7e6c09e45c7798e89229","sha512":"9a391db03fbde027dfa02533b1c61705fecc9a72b95561f8561e310c2825736b2051ecd8750ed98d1807f44a9c10b829bcab6ca91e68426d3edb4a11f482cf1d","ssdeep":"384:Igf1fKJqlj+F0iFky4TGyZOTMTrSMUmQyNXtNndLrUYyNmw8y3LYfnKdq6hSDplk:IgfUdV4ZGYrSMRNXtdokwzcnK1epqWVA","tlshash":"a2a27461b21d553601db15bb71ea63c0b6702089b48248587c3c8cdf1aeadca76f5ffa","size":21903,"data":"","first_seen":"2025-11-25T17:22:52.10454Z","last_seen":"2026-02-11T10:30:06.554837Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hederawallet.io/img/favicons/400x400.webp","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /img/favicons/400x400.webp HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5900\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a300843a4071c775682910d73fdca16","sha1":"a51708a2f2ec79d0e52e610c463ee9d56ad84430","sha256":"bb0b45007e99051e170f1a34b129c88f90ea933e350753feec94d05251275c4f","sha512":"c88595e9134d63a65f2acf22561c3766c692e4bed2e2527fbb8bd7c1de0d822d6278ea16e60838aca798c55a5b45b279d1b8d75645a10e92a83154da60e348af","ssdeep":"96:fP8cjFX0KEeFMuAyapUpeH5mlCfr0sOlTt1fUVISA/esdMtVHULzJqm7425A/:X8cjFawMuAJCJlCfSlnfFIPPHURfXy/","tlshash":"f6c17d8788cef872d1564ac2bae07f69927d8c1005dcb2f76a62ada4f7424dd32964c4","first_seen":"2025-11-25T17:22:52.105483Z","last_seen":"2026-02-11T10:30:06.538591Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap\u0026_v=20250915172059","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap\u0026_v=20250915172059 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 11 Feb 2026 10:29:44 GMT\r\ndate: Wed, 11 Feb 2026 10:29:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-06T20:34:28.500482Z","times_seen":29395,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/img/logo.webp","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 25318\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cbb32d7f80670ddbaf692301259ef86","sha1":"46d7452e98b426bfaa045b6d97052a4f974d3722","sha256":"d59be4112ba09fc784b389ce4652e12fe7103132a1cfd8a77f69dd093e7db709","sha512":"d1ef9f96850d9686c86b37981f647e58dfd0f4bccb6695f8b66a95d31c37805744aceadc3516ba1d5af38a988363dd9bd605a2f066698418ea2742bee900b3b2","ssdeep":"768:a+WscXdxQRnAEQ25qwsStFMYYRW8d76REnB:a+Ws8xEAZSt/Yc8p6R6","tlshash":"f5b2cf3576f3336b6733279419983c1e3ecdd0e5eec327819b84409c80a1abda6ad443","first_seen":"2025-11-25T17:22:52.107402Z","last_seen":"2026-02-11T10:30:06.542954Z","times_seen":3,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":200,"dns":1,"connect":91,"send":0,"wait":101,"receive":88,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/img/home/coin.webp","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /img/home/coin.webp HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24686\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4cc8571003ce37b64cf089d4f903be1","sha1":"aecbda216c84b3c8c4e61b5caef4bbbb6e372ae7","sha256":"f75744d05d4ce73507fccdc42786c9ab0068322af666d8d3fa0ea883c817e475","sha512":"45c7b550582a0fecde8d8381c6a9eadaee927191d7756b290dc129c0a9eaa5226d81ffec1456819ba00c43d86cfc760f39a796162b84f0ef1863c046e70a817d","ssdeep":"768:81aTEvtFxgELjSS7ZRYulzrT0YFqSYd+o2hD4WrHh2l:8WE1Fxp/SSNaulzr5Yc9vjh","tlshash":"c7b2e1b762e45d02f0192f8be1b4e9a0cd09d1052760ffb2524d9ebe16a810935e2577","first_seen":"2025-11-25T17:22:52.10282Z","last_seen":"2026-02-11T10:30:06.544988Z","times_seen":3,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":200,"dns":0,"connect":90,"send":0,"wait":96,"receive":89,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/img/home/image-01.webp","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /img/home/image-01.webp HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 19042\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 850x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"967ac7589b1a75937f0b40a9597adbc4","sha1":"ee97a1fa496b43f7aa610e8a00f181863a516c16","sha256":"4ba7b8067649d837659a4fff3c25655575fdf519fd79d6342de07d029a36f75e","sha512":"72969ddbecebdf937f9480828a9f39dba328834a6e9a31dcd5968239a027dd3fe07c508af6b88bb2eaae87b666aa731a5259246b697e71d9a78b921d24da56c3","ssdeep":"384:+CYk16pL5WniLo7MPp/KDaIolE69QSM8odeDSR0IOg:+CYk16PWiSMVXlli8okk0s","tlshash":"2582d0bbab9d721670360a643e4dd93d0537381ecf52822e5f5620b2803c8b9aa76164","first_seen":"2025-11-25T17:22:52.108262Z","last_seen":"2026-02-11T10:30:06.546722Z","times_seen":3,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":198,"dns":1,"connect":89,"send":0,"wait":103,"receive":88,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/img/home/image-02.webp","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /img/home/image-02.webp HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14066\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"727fd2bdf294420da5d56c91afda3dd6","sha1":"8e88751b9dc4217a7acafcfd347a0d18319ea0e3","sha256":"a6e3ee73f3ac0df10d7600b007914f92fe9efadf49862437b03b2bcaab54efc3","sha512":"4aa0a3843ff2c3ae20179e94adf18f24eecf68dd9e58fcbb4f1a2cf0c8eed323dc5c1ed208a9363800cf33d13fc10941602f4702a3311a9306346e2cc76261a3","ssdeep":"384:lKlX+4rIki/Tbk5DbZDLvUEIvmTIqRTip:c0Qw/gDbZXvUEIyIcip","tlshash":"ac52c0236afad705e52bc43be5b5cdc63164049b353aab7cf9742a55db1205eea00443","first_seen":"2025-11-25T17:22:52.103639Z","last_seen":"2026-02-11T10:30:06.548045Z","times_seen":3,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/img/home/image-03.webp","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /img/home/image-03.webp HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 88050\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":88050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1311, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"016caf4cbdf91bb3f2a94bd749cec57e","sha1":"a6f22e7c136cc4694814e85aa6648d717be870cf","sha256":"345191d24b81076704d63186c0676188c3394c93916fa318517ada6d5381043c","sha512":"04d78e23a99450d2114ba31021124be5357f2917bb04a1eeb139313d4b956cc1b1f93ef198870abb2c924ea5aaabe6fcad51211c656fec41c877c0efafa01a42","ssdeep":"1536:g6II9Q+ajDJPRYT+q1ejXpfOVBNdPcbbH14uzb3wwMDi98utbryoV+I3Iv9ftM7e:tsjDr++q1elWObbH14uzzwdi98YrXVI3","tlshash":"4983128eb49b9cb7c7be9c24f027758127b33bf60119055868fd87592a8b0345dbacb4","first_seen":"2025-11-25T17:22:52.108971Z","last_seen":"2026-02-11T10:30:06.549673Z","times_seen":3,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":177,"dns":0,"connect":91,"send":0,"wait":93,"receive":180,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/img/favicons/16x16.webp","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /img/favicons/16x16.webp HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 330\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65b0f0f62c224acf0c3a7d7bfb9ececa","sha1":"e5e0e09c06c8085c9c77b02b5403c48a61f8d533","sha256":"01b6168c7b21f2b3986a4605ad3a0374a68ebfc80974c2a876cdc861f1658e9b","sha512":"2cdb72733d18141a358e5bcf801cd3c82edd3d6d0666429cea694181681913df967cfc536db4ad9658946dc9248e308168b77cf7128293fae0c20e3fc7cea49e","ssdeep":"","tlshash":"36e07d69ea40aeb3ef8d8f3dd588427f7e1bb454a1c6af4208c506c34450d6d77324ca","first_seen":"2025-11-25T17:22:52.109848Z","last_seen":"2026-02-11T10:30:06.552174Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T10:29:43.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 38052\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":38052,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2656), with CRLF line terminators","md5":"bdc448b8e47b9f2a91b9a56458439bcc","sha1":"95922ca68ede1ebffc8056a7f8601b9b67d09bc3","sha256":"c19448420a79782af2965060687055f3ae048e9a47421916954887ed39b71ad0","sha512":"00912f6dc7817381d9a09075e9cdb1de69c01a194fbf056cdbdeecbac7b69b750419a9500e967f543927eb87e46aaf95b16bdc0315977e48c55f4fbfe1e42a25","ssdeep":"384:Ahadm6v/brfrpOGG17ZRRDcqLUPwMtrsHOT3wMfB/sdewMceshMxRC2/MxCKtr6q:6ad2GGYQlr65wyXc9WXgYzTfI5iA","tlshash":"9203846533cca4bb910343d7a23173a5a0afdcb6d7225111f2faa33b52d3c91962b467","first_seen":"2025-11-25T17:22:52.106464Z","last_seen":"2026-02-11T10:30:06.553148Z","times_seen":3,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":182,"dns":1,"connect":87,"send":0,"wait":89,"receive":103,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/css/style.min.css?_v=20250915172059","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /css/style.min.css?_v=20250915172059 HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:51:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 90489\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":90489,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"59272a2e82a9291ec4fd96fcf5b6f65c","sha1":"0ca4c69441cd925177f6a7d32594d86af5c9d484","sha256":"677f5884ebc9468c9489e76887bb89b3b0cde7e682d4a11f8a474ca069947e94","sha512":"ebfe2e3562755cdc18ec12e620d9cd72c7b60485652c8e4ad84fe4c1190da3e55343052835827fba8aa1f810f61a62d1fb08832e619736c313ee3c5fcda3fac7","ssdeep":"384:ceTyYFXuVDoLQcLabvf17pUTa94YbZvO1bPlYoeLpEKU1pqF0:3yweVDNnHU+GuvO1bPSMw0","tlshash":"b99334adb650e36da837683ba7dcd55c6514e802c8134feebe43a5064ec77f312a170a","first_seen":"2025-11-25T17:22:52.101956Z","last_seen":"2026-02-11T10:30:06.554002Z","times_seen":3,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hederawallet.io/js/app.min.js?_v=20250915172059","fqdn":"hederawallet.io","domain":"hederawallet.io","tld":"io"},"ip":{"addr":"217.148.142.44","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hederawallet.io/","date":"2026-02-11T10:29:44.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hederawallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 08:38:41 GMT","end":"Mon, 13 Apr 2026 08:38:40 GMT"},"fingerprint":{"sha1":"DE:D7:52:A0:C4:F9:55:38:35:D0:29:70:62:EA:5B:74:AC:C0:0C:A9","sha256":"FF:73:BD:F1:DB:B9:C5:A8:F4:6D:4D:26:4B:42:D6:FA:85:A6:0E:77:1F:70:90:1F:59:E6:A3:1E:5E:B5:AB:F6"}}},"request":{"raw":"GET /js/app.min.js?_v=20250915172059 HTTP/1.1\r\nHost: hederawallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hederawallet.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 10:29:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 15 Sep 2025 11:50:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 21903\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21903,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21859), with no line terminators","md5":"dcdacd4bf6c341bf3950bcbdcb32f06f","sha1":"003e04e103dbccd37a4ddccc1ebd6ae5c32ebc04","sha256":"38a5acad54b11a36dfe1c34dac564c0795da4a1e56bd7e6c09e45c7798e89229","sha512":"9a391db03fbde027dfa02533b1c61705fecc9a72b95561f8561e310c2825736b2051ecd8750ed98d1807f44a9c10b829bcab6ca91e68426d3edb4a11f482cf1d","ssdeep":"384:Igf1fKJqlj+F0iFky4TGyZOTMTrSMUmQyNXtNndLrUYyNmw8y3LYfnKdq6hSDplk:IgfUdV4ZGYrSMRNXtdokwzcnK1epqWVA","tlshash":"a2a27461b21d553601db15bb71ea63c0b6702089b48248587c3c8cdf1aeadca76f5ffa","first_seen":"2025-11-25T17:22:52.10454Z","last_seen":"2026-02-11T10:30:06.554837Z","times_seen":3,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":162,"dns":1,"connect":86,"send":0,"wait":100,"receive":88,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"hederawallet.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
