{"report_id":"0e255681-afa4-4156-b496-593e14f82a98","version":6,"status":"done","tags":[],"date":"2025-10-13T14:15:06Z","url":{"schema":"https","addr":"www.wallettools.org/asset-recovery","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"66.33.60.35","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.wallettools.org/asset-recovery","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"title":"WalletTools - Recover Your Crypto Balance Easily Tokens Recovery"},"submit":{"url":{"schema":"https","addr":"www.wallettools.org/asset-recovery","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"66.33.60.35","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-17T14:15:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34546,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.329450+0000\",\"flow_id\":1833672019341807,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34546,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3091,\"start\":\"2025-10-13T14:14:48.324079+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34542,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.332633+0000\",\"flow_id\":1616159843086655,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34542,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3090,\"start\":\"2025-10-13T14:14:48.323903+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34562,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.340339+0000\",\"flow_id\":1666793212539565,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34562,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3090,\"start\":\"2025-10-13T14:14:48.324269+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34558,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.342478+0000\",\"flow_id\":2043940733252168,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34558,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3091,\"start\":\"2025-10-13T14:14:48.324168+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.wallettools.org","ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-03-15","domain_rank":0,"first_seen":"2025-07-14T15:25:01.030876Z","last_seen":"2025-08-04T08:24:57.463043Z","alert_count":236,"request_count":59,"received_data":2544719,"sent_data":30415,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2025-10-13T11:59:21.892688Z","alert_count":0,"request_count":2,"received_data":3044,"sent_data":1160,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imweykdbnoiuemaelnnb.supabase.co","ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2025-07-14T15:25:01.028904Z","last_seen":"2025-07-14T15:25:01.028904Z","alert_count":0,"request_count":4,"received_data":4276,"sent_data":2626,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-09T03:46:15.24522Z","alert_count":0,"request_count":2,"received_data":1686,"sent_data":2050,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.etherscan.io","ip":{"addr":"162.252.84.9","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"domain_registered":"2015-08-12","domain_rank":1708964,"first_seen":"2016-02-15T11:18:58Z","last_seen":"2025-10-10T18:52:00.001861Z","alert_count":0,"request_count":1,"received_data":598,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-12T22:16:17.945241Z","alert_count":0,"request_count":1,"received_data":643204,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipgeolocation.io","ip":{"addr":"116.202.166.112","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-02-26","domain_rank":221461,"first_seen":"2018-06-28T11:07:23Z","last_seen":"2025-10-06T18:16:26.263363Z","alert_count":0,"request_count":1,"received_data":1789,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":425767,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34546,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.329450+0000\",\"flow_id\":1833672019341807,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34546,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3091,\"start\":\"2025-10-13T14:14:48.324079+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34542,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.332633+0000\",\"flow_id\":1616159843086655,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34542,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3090,\"start\":\"2025-10-13T14:14:48.323903+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34562,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.340339+0000\",\"flow_id\":1666793212539565,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34562,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3090,\"start\":\"2025-10-13T14:14:48.324269+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T14:14:48Z","timestamp":1760364888,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34558,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T14:14:48.342478+0000\",\"flow_id\":2043940733252168,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34558,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"imweykdbnoiuemaelnnb.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3091,\"start\":\"2025-10-13T14:14:48.324168+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/Br-9nVrj.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cc109c0bcff9f234e797fb12d841fe4b","sha1":"0ff0033b37efba383e7ba12e4ddc10a7dcb63cbd","sha256":"f2a9945354dba1edec05b42e0a330f40c3e8e86bad889b48fea8b493333df6b2","sha512":"182c839fc7cad422e56a85e1a4224d82cc1645bef4de1274720847555aa4cd0c0d226fccbc60b3a1d759593b69db69fef486a866660757c24f1fbc12377391ce","ssdeep":"96:LdMWMbkq12FzFi3O1fTZ/gJ9LTspI5T+gaYwFh501FIZz9:LrMbkq4FzU3O1fTZG9LY3g+h50PIZx","tlshash":"0c816109534f8ebc600acdd823677422378ca522b31e8ec081e4d521d47fda9576ee9e","size":4177,"data":"","first_seen":"2025-10-13T14:15:12.777315Z","last_seen":"2025-10-13T14:15:12.777315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/B7beDMSV.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"25a398195c1d95accce12962c857cd2f","sha1":"c986169c6550991b31231156f09e8a339877a4c9","sha256":"2c7e74985c5cfdc3b04847e74d96337954c1b919312e66f553d2832442c9e307","sha512":"8788fde13c1fed772ce0ae824cd5068b446f2d88ff877c0c04ca6921ef18e923dd028629ee48ecffc61e53b66a13bf3362c5a016a0fd7aa5eb8d81c94a23e789","ssdeep":"1536:jN3NpnQ2oY8WGkk3vq85ETq3e3BkmdrUEC+k1BF0:jN3NpnQ2oY8WGH3vq85EW3e3X","tlshash":"2a23a490a18572371a5313e4846e1309af3e7874a7cc9427b25dded72c62c8a4a3ffb5","size":49570,"data":"","first_seen":"2025-10-13T14:15:12.836503Z","last_seen":"2025-10-13T14:15:12.836503Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@latest/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce5bd54ade787e3757d0d32ff267280a","sha1":"33daa933561e55f9988e2be25448078f97ef0db2","sha256":"f03340295d792adb763c777eaa96039aa831c2402bd7cbc970db44931fa736b8","sha512":"11ca21748cd36a3ee4bcfd3298cdd188ac5a9ef7f01af8ecae6a2e15139e2dbb485cd5e04010d479eeb0adfecbe1b8304a25c66512e2d8094390e4385ab08a62","ssdeep":"6144:iNajiG1YOdqCibdPB8c118X1Unf9F9CvU9sT6Q479FwwQPvi6naRq3A7Hpa:ic+skHYW79FlDpa","tlshash":"98d44b847690f0a10bdb50e554b70002f334b965701d94a8b7b99cebbea9ecda137f39","size":642428,"data":"","first_seen":"2024-12-04T22:03:33.643534Z","last_seen":"2026-08-09T14:31:14.032964Z","times_seen":2219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df1d9095464fa453bc7f47e3aad0d33d","sha1":"f45b97b5c2d6b8dfbcb7acff980de44ef03c6c4a","sha256":"ecceb4f8082cd11cf952e34cd4339a8054030b202ab2479b8ea89916651ddd75","sha512":"8fb050ed2dfa0e369e301ba352f1d1f4755f23dc46fec1a4a96f730540229644def4de55b56fa68be5b05f0a3fa277408082b9bc6d6f2458b38d6154cd9dbc9a","ssdeep":"192:8NkLw7Ly/b7pv//R+o8OwfBOIaGAdj5bHW+LjuBr2d5wL9OspKT:OkLjJRLrX7x5bHW++ByL8Oga","tlshash":"a602a4d76005f4fb28ea8cef951f100053b43965792fa121592c8c79ab2d9b953aac3e","size":8734,"data":"","first_seen":"2025-10-13T14:15:12.813338Z","last_seen":"2025-10-13T14:15:12.813338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/C_0Aez0L.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"484a5baad6e75621f0699ac9c4aced97","sha1":"0fe910726c97e780140026bbd65feb30dff9b4ed","sha256":"77544aba40b7b9f4c8eed03b474edbb39ed3632723b537ce31b9bc6a3b25672d","sha512":"15f1a1c3f59c79740a72c6d7f486e02579d2aac4d516dd77bdd02ec7d1a3529870449ec895d499b3dfe112627a05f753502b1975374911dcbe3a2cc5b10ef963","ssdeep":"384:koNz6NTbxcBEnA0z4KUaGFbXe8uR7tJUurTTt15DNDlg1KkjDEYn9uk6:kokHxVnA0zBUaGFbXe8uR7teurTTt159","tlshash":"9982d9ea2575f4fe10bb5cbb90270010f3b42168fd1e5940d7ece8a12e6067867a3f69","size":17699,"data":"","first_seen":"2025-10-13T14:15:12.846154Z","last_seen":"2025-10-13T14:15:12.846154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BQZ9KYES.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b6c59ff6ba0705253bf27cf10a55f91d","sha1":"f4f5f3d84b2e98cf150019dff5e7d4a9a7b10fa9","sha256":"dd9d1e75dc2c3a4c898fb6b5450c315822d525dfa47733377f06503d028c3dc6","sha512":"7d81a9216bb140fbdebf1418d605ef91f574affe06102221e5dda30bf0545a6a25f734ee3f2a23a1143a05700e1963f6ccd7f1e6de3712d6621f612a59ce5aee","ssdeep":"96:xoQbhL4ZPZG02XYTGgVzDo96DKGBcL/o4RZHke8zruR+Zvs:xulNNDzDKYC4zyR+O","tlshash":"f99172ad61c0e3f402d95bd816ebaa04467ec55471c788c9ed8f45e43ff90ea4e63a0d","size":4452,"data":"","first_seen":"2025-10-13T14:15:12.910054Z","last_seen":"2025-10-13T14:15:12.910054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/asset-recovery","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"832cb8fc841c93ace5890197cee6cf6e","sha1":"a53007af10b72c72581d22e52711cabaa8aee572","sha256":"326ae0c0bbe1675305e005b6222072675b8743e7b91fc7f4b1670b4600d494cb","sha512":"edf2678b6dd8521b5829143b35f8aeab11810c52775c3d4696340c0c147b768fe15ce179e6e73042ce2cbae8fed3bbb3faa4e3b762e5a421568a1af5fcfc4246","ssdeep":"","tlshash":"d4e020cabf1d191b855e477e602ad3dc153e40b55d4014eb3c4cbf6526e6c149749905","size":374,"data":"","first_seen":"2025-10-13T14:15:12.919121Z","last_seen":"2025-10-13T14:15:12.919121Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/entry/start.Dlzz3R-V.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e9317c59905b811fb93c8077aa11fc0","sha1":"383deb4fe4a3f1cf8af238004ed1b95ed5350b01","sha256":"7900a10f25bb30ea9242f286a1aa1306bedf060b697f75890b51ce547c479012","sha512":"befafda10573f51c7018bab1c8ec26ca66e58efbc46cd8fe6439619421437fa7614b7070a7de77fb49687ee5b3acc2ae000a121bb60421d9e96be691d4db4164","ssdeep":"","tlshash":"43a0123a04006470440b1848d240c30041147c7553b012420018511e8dc00c74209952","size":83,"data":"","first_seen":"2025-10-13T14:15:12.831867Z","last_seen":"2025-10-13T14:15:12.831867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/B7gcrP4j.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8a46b23e63e33ecd768340a5fbeb4fc1","sha1":"b4a247c2bf624d86e06c88b38c6e18b7debdf7f6","sha256":"a33f4483d1018b1eeda665456ef6342be0e8a6937630f2983bc0ebcd16e90837","sha512":"3924285b733334b5a569fb969822b810b9d272cd98437e1da00c5af658ba4862424357f907db8bddbddd5f1847020f80805521281b5e923ef75c7b6c7b754d28","ssdeep":"","tlshash":"321123e83250a462679f28dd80bb505361502612b53a3ae071787fc72b241fbcbd2d56","size":907,"data":"","first_seen":"2025-10-13T14:15:12.891862Z","last_seen":"2025-10-13T14:15:12.891862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/0.B64e-uZE.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad49a5c629442cd4b4aeec61387d0c4a","sha1":"8e6446ee3c8c46ea9debfbbd618ccc028eb33100","sha256":"2acdd7a7c8b94e3468871d3c0a9435881f7213d7de79907036363fc7c39d5ea1","sha512":"e2e73a2e22f5abd788082501463db932173768f6e1a2688bf06cae77fefcc390d049dd1d4cac8e7803dbcf52663f572fcf86ad559677beffd688e0e394ed6cb9","ssdeep":"768:mvc0Yp02TnC+Mg1djzgs3lG4wB+5pgggX4b3EcyC+wY6/u88pDqfTrXRo:b06NmIxggMi79H/8dn","tlshash":"19e24c98711d74fe633b88a9207f5000b3a8b657f41d4944e5eecca53bcaa8903e795f","size":32309,"data":"","first_seen":"2025-10-13T14:15:12.907602Z","last_seen":"2025-10-13T14:15:12.907602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb67ee753a339fe8e6f9253c655bc6f4","sha1":"638df7d769d3d8ff843023530257379555ec8694","sha256":"c8c24a0837cdaac45788c9ffef8a8c4cf42efdd9b83b4d87ba5ae424eb8ceccd","sha512":"ad01e1e142d3fda452c62e455cae20d234180fdc71c16ee44f0a696bca955c271096be1fa0dae15d86d215b317f0190f073bc6ab45eb6b0f1c507fde19c7c250","ssdeep":"3072:HI8A13W3L80MYYwxilHSo4IthItKNAEM0cprAhmxgKxALvMaGYAo0FjEfG17KT44:JkJZlHzDAEafItOjv1OTg2SPGT5r","tlshash":"2e844b9433a1707683aa18e0147f510ab23ab92da449485cf258e8f77cbdd84667ff3d","size":386442,"data":"","first_seen":"2025-10-13T14:15:12.834067Z","last_seen":"2025-10-13T14:15:12.834067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/3VE97lel.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6e588f4f37ad28431155a92e79b4f8af","sha1":"b5c5b9d6a9748e9ac04fa5884839fd9c25613d36","sha256":"e776554a9b4dd0564f668e2c06bd79ba016b124cde939e1eeb84f69486dcde79","sha512":"410731da841f5756ce93ecb366448e1063e6f45a124f8aefdfea72a60d92480a64dc4b81b42b47bbb00625be5875eeaec96a3dd5a37771f5b26f3b5c120da067","ssdeep":"","tlshash":"4df0a3ac30c0a4b49056a8de7e77941363501150ed7ccda0d6dd61d189918f5e787e3e","size":458,"data":"","first_seen":"2025-10-13T14:15:12.887576Z","last_seen":"2025-10-13T14:15:12.887576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BRTrXkgU.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b6fac7d038784c2e88bff70483ac4ddf","sha1":"1704ec26745a66eb7e47ba05dd29612bbee6632a","sha256":"167feeaebee35f1ef19a60cdefebd3f1b328c1ea08b6bf4b561edb7eebb89cbc","sha512":"bf9ed2e94c238b57840b623dc93ddfc950b6302eadc4d6033054521cc0906fc51f1ca3365f255cfd52d9064a73c8c2efd06cc429f4e886ecea0df146dacf01ad","ssdeep":"","tlshash":"8511b18c359120b2a78918e985ef18598235ac05340f9594d59825837ea27fe52ead3d","size":925,"data":"","first_seen":"2025-10-13T14:15:12.804687Z","last_seen":"2025-10-13T14:15:12.804687Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BuB7Ymj8.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"87a34fedac4ccf3dbcf93842f87186ff","sha1":"056d145e59ab9649359809ba766c7f412c57a1af","sha256":"b6aae5e963ea019ac4942b545f80d716570945d10c78749e6c35509c52d57c1d","sha512":"6777a269bddbf3a8debd6ba71fcf94250cb722f8432f0db5b1222b1548057afd0a8f16d7bd9289400d159ed4bfdad956572f6b23fac97613e8e9166380d121cf","ssdeep":"384:Ah0iC7spo6YnDz3fzXWmUHGcm9lsEJb/nFkXvBBF1k:AhE7spWDzzmmUmcm9lsEJb9kfBBF1k","tlshash":"ab6284e83285b17653aa05b650bf0106f2742480780b84a5e1adbcdf3d7259a56fbfbc","size":15065,"data":"","first_seen":"2025-10-13T14:15:12.87316Z","last_seen":"2025-10-13T14:15:12.87316Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/1.vVQ5Nf8m.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be815b27f1aa28c08c394d64e04a5578","sha1":"2f3dd5cb36f7a8c7c8539dc4231942fd5c13bd83","sha256":"81f8f687a7624eaaf651a1ab18b4d9c3d4fde1d302a0f6aa870aa86c4d135a05","sha512":"23406a031d7a2f700274b864a1b82a92e60e2bb1b13a43917ccbc797435cc76eca6daadbcc1859e0a699bfa4935cd8eb3eb97c7dff199f11ee192b89cabc1a1c","ssdeep":"96:eIRAmZd7pnvoYaTMg0ghFH7IWJEdwX3QBR8B9qDDXyhBy/Rag0I7Yelrn+yZd0nU:eImmZd9nCTqgTJEdwX30RmsyDqRzvlrx","tlshash":"a9a1daeea046e4bf69770cb99588d001a124079df83d49a5d17ccc7166c88c8a357efd","size":4882,"data":"","first_seen":"2025-10-13T14:15:12.816979Z","last_seen":"2025-10-13T14:15:12.816979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/gZGBu8Hc.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2f0b5ab8d70cf615dd2622ed4dfd2d39","sha1":"2a33567d13666984c117124f6a1474a4db12490c","sha256":"ae551ade8f828d3ff4df020bdad312ca6cb72fa54b39d40e40912efe28f3c5a1","sha512":"4acdc8bf050719613ba9c24ae6ba65b860f92d55ee5bad8813b0b2ce88e1fbd37acd5c2439517a19ac6ec352b0c59eddf432a11f9ee87bdc6538dbf6cda5d0db","ssdeep":"1536:jceocQLXf45MODUifXGYtIq7kWbdc5dRaH2r6o7Gcg7SP8PD+j53T+FMtEWtJ:gp3LvGMUUifWYGq7kSdcxn37G8Pm+5Dn","tlshash":"90933a2e179cb03715c169afeb08b73a81068cbadbcee5e14c95429b23ecd7d41079b5","size":89114,"data":"","first_seen":"2025-10-13T14:15:12.902341Z","last_seen":"2025-10-13T14:15:12.902341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/asset-recovery","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a292896559f418bcdd92867ddbf9576","sha1":"1242e36b65525cb3a15abdcc9e25764c036958af","sha256":"c7f011d48c093447b31151fdafc278f3e3bd8f0ae9ea154797f7ff8bbde97660","sha512":"2fcf537087ed5101504a6279459dd601cfd2a6dc06ed233dcf22849a1cf936ae862af461a7222391d74bb694dc30b24687083bc2dc8f88628e98fb2991ebc54a","ssdeep":"","tlshash":"b5c08ccc264b4ca1aaab3a414b7f61027015e10360800c20380f33448f21e37d744918","size":165,"data":"","first_seen":"2025-07-14T15:25:08.009063Z","last_seen":"2025-10-13T14:15:12.921149Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/D4rfOHpC.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f4578ebed993a298d351fd4e3685d48a","sha1":"d96cabc7e44c0092bf0ce399dc021982f799fbf3","sha256":"d9760c84b3f5c87ab0dec6b8a1e8760c2e06e5420b9ca89e8f7c514100577ddd","sha512":"e64623f64c084920fd9540d29b6ac75c2bdfd54986c807413f8710f98ca08b8d9952474440e4ac3b30655e433f91c7ff2055246957e5e112effa6e9eaa6e3c57","ssdeep":"3072:WTvZmyhFmhMSPqeqCPiUTt2WW1+SNg4FpDJzqJKJLGJarJAJEJZJnJSJj:WTvZ3jSiXATK+SNg4FZYMoMyCfNMp","tlshash":"0ec32bc4b2b668b205c0d8e0d4361603f3287919b86dd06c767d1edb6e99e09db37e39","size":125075,"data":"","first_seen":"2025-10-13T14:15:12.864428Z","last_seen":"2025-10-13T14:15:12.864428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QM237H0Y3N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2c3dd5d70c294be8d1e5d80bc305f3a","sha1":"f4bfe496f9eeeb5a3c8a478fedc910f704aa1ab9","sha256":"5a02d13177a934869ac821240a12b04f8afb0cbd6f7fb105e16450120ca0c3b0","sha512":"c48b4dcf863720f081247ff305f4d00fbc1f6eff76f454f5b3b885f4633bc13d743d8646523e52992f0a8faeacd0703786aacaca197e5ba50ac229ecffe8205d","ssdeep":"6144:/B9D/yp2a4tk0uwbWZJT+Nju5204O0NsYXdXAQY:JEYJm0KZJu0O8","tlshash":"8f9419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":425163,"data":"","first_seen":"2025-10-13T14:15:12.849199Z","last_seen":"2025-10-13T14:15:12.849199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/2.CCx-5SZP.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a0eede958d1d884cf412ef662cb8b88","sha1":"b1cee181a69f7df504bf4924e4548b2731bdb8a5","sha256":"92d5b453bba000a5640bb220d2b0bb8f142f3c2869ad7a2d8dac8834e8320790","sha512":"231779801c88b0b0258150061e48249ede6de629702204aa0922f46d47772ea0464d35748d9efcd0535653c21c5b1b0462c538c3db8116a1950d81fa8ec4bc91","ssdeep":"1536:ohKEKmt+Mv5c+nPs/zNofbJbeGusApLDvTbaZ:ohKEdt9v5c+nVflQsy+","tlshash":"09533c9d335af47e526f8eeaa07f100073140b99f20e4801f1bdded23da5a4a176796e","size":61282,"data":"","first_seen":"2025-10-13T14:15:12.879886Z","last_seen":"2025-10-13T14:15:12.879886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/CF562PFW.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c2b973278daed317eea247bc97fd6d78","sha1":"62be0aff3e15b91b786bcc0b88c2b11f71cf6aa4","sha256":"815ab71472c68cbce8acfb94c18b007297921d8bc20ce6194255a241687b33dc","sha512":"8284aa6aa0e642cd2849a10bdf5651746533ce5d79a517e27863f0e368329e6354aade72c76c9945791dc4dad8c088b48b2f794c472d57459d8d3d0fe83e9e6d","ssdeep":"768:MoFSlIk9sL/v0J21CzZj/FxCsaobKHyLIj1PheT3GqmITHZgoXUtIeKEQkz0h3A3:9ezZbtHEt2xxF49","tlshash":"88e24ce430f5f07726e716e180bf1212b2292517340ad4e1b19ddd56292af4b8bbbf2d","size":33447,"data":"","first_seen":"2025-10-13T14:15:12.802072Z","last_seen":"2025-10-13T14:15:12.802072Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/IHki7fMi.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a57d2a0c60b30e0abc0f7461358f4e44","sha1":"83ad8c69c6880cbe5ea6873d14d3364b4647bf4c","sha256":"e3a14a7d740378a641b90080433ba7b5a949219bf55db04546d151e79d7292d1","sha512":"5785374ce11683f40d2d85da8c4b176a649edea991832b79f37fd143aa1e9256280974b8d2a372120e740d3c82575d44b97cb1ff2bed8d91f34d406add58330a","ssdeep":"","tlshash":"2db012413804423100f1150f52326700b1881379341471f2c290143bb9cfc03cb002a1","size":90,"data":"","first_seen":"2024-08-19T23:06:15.011977Z","last_seen":"2026-08-08T10:43:51.269777Z","times_seen":2377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/C1FmrZbK.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"17d364f6a55a02cc2a058c5c8a5e8d68","sha1":"b9bbac8b3626d3dc8c1916cc6e1a43420d51f78d","sha256":"ddabd08ef1896dd07a2c2a8d01a9963d181dcdaf1d3cb917b321965c3937dde9","sha512":"9113fbda524aa8c818ae8468230b44024e4da84611fcb41eb043aa4dedeaf585056c78f84299a4211a656b8aff8a09767d8f17c7452c008dca715c898e933d31","ssdeep":"","tlshash":"3821639621d4e03212a95ed5f2f0a3d3f9e02897b8111491900fcd526f1dfc5d1eae5a","size":1141,"data":"","first_seen":"2024-12-05T16:17:54.649321Z","last_seen":"2026-08-11T10:49:04.085462Z","times_seen":3616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/Bmb3m_9-.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fc1f66da676ab86c112f33342032e08b","sha1":"5f6ac916e5c49eabade1d9d87c309660586ac720","sha256":"c3c9cb5ed7964614b436d8c8fc39630d4c16ae65b47a689bafaa7a968b2420b1","sha512":"93169171b2421e77a6ef2728c95fa46359422e3e684072478ef0ca9e4ce7cc72b57655a6285a07ecbdcd04b15d67d376d2c3027663511a9c26742f9bae38e3ed","ssdeep":"","tlshash":"4b316580fac17a6056e246e1c9bf3590c2285a50370fd9f0e4fa45617d376aceb39e9c","size":1790,"data":"","first_seen":"2025-10-13T14:15:12.885942Z","last_seen":"2025-10-13T14:15:12.885942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/Evs7_YCw.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e04a562c69eb9e0d12bd7b09009fc03d","sha1":"4672a48eb0eff54f9ae7c64f91a344cb2c90e833","sha256":"96dbe91046075c42e11e63e75c71aaf34544cee09b94b932187d6ec59454730f","sha512":"0c22a7519b5bfd04e90b33645300ba115d287f4668a4c0c685c29cb9f3734190e1efbefaf9a4a9b376c5a66bc3ee34d20ae96c4e7113fda57f6a7ac81709072f","ssdeep":"","tlshash":"bf2101df91d9c5fd40360daa6844548122262328d7b9cf90d5edcf2136500ca9857afb","size":1406,"data":"","first_seen":"2025-10-13T14:15:12.782006Z","last_seen":"2025-10-13T14:15:12.782006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/CgU5AtxT.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"293cf07bb6b52a1a18d797328200c9c7","sha1":"bf69950a40f5ba11475e896a5eb2f7b049370031","sha256":"8ac7e74d523881bb9ffb193d8897292cd05f78dfa91ecd285411d337361b1fb2","sha512":"996ab8246130832bbf9f7ed8bc24419e34e501df8d36a34fb16bf0269f90c593b3da05f0fa96fe2444a0345b32175b4781192ba0fd02a11f33cb2902c44e5a00","ssdeep":"","tlshash":"63e07df6ab81a0d5822e45c061d3a1bef30820743107fdd8114c99d7ae9f2e13735e1c","size":331,"data":"","first_seen":"2023-08-29T13:04:58Z","last_seen":"2026-08-09T16:02:17.145439Z","times_seen":786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BE1ViCNk.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3a4602833b423005ae377b3bd6c24a38","sha1":"8624656b014c5838552d8e7b5d9689e721fad418","sha256":"37f6e40a04a8a4022c2379d6626fe586ff5bf83a8da4a9b0fb5012f2b83e0287","sha512":"10d9bdf9440ca3c834bb99a2a2a707e238c1945732e69f6cbd9eda1080eda4e59f01856e21570fe6bfcf3b9ba37cba992cbddfc5aa307abc5a6ecc13c1ba652b","ssdeep":"192:qu6Z27gwH59BQ3sUqVivZZghZaUGQjv4sS8TpJofqhsKvowl:qzZR859BGqeZuZcQjnpJrsK9","tlshash":"3402eafd7157e8bda06e80e6516f60007365259afc2a0dc4e3ecdd913d6a9d8203f81e","size":8368,"data":"","first_seen":"2025-10-13T14:15:12.874897Z","last_seen":"2025-10-13T14:15:12.874897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_vercel/insights/script.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f76055e209635f87ed02854d70b56528","sha1":"d8c76e0ed7155db45d01475829461a1393fb52a3","sha256":"b9a3180c017f7b78f9a4d71992e83ca63598ae16c15f5e89638bbf17b57869bf","sha512":"be5cfcba0dc68822f5bd2e9bcc1a97b628ee7e5c3051d8114238ffc9107bf256d6abfcbc7300daa230c7c1b6a7f2a2e98fcf86deb2ab807cac1f743c0d27c579","ssdeep":"","tlshash":"c44199da7960b1294ae651a0853fa655b3bb2b93bc41411131c58dac3334e1ef3a3e95","size":2383,"data":"","first_seen":"2025-06-12T01:15:21.739215Z","last_seen":"2026-07-05T03:17:04.087157Z","times_seen":3094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/YsaGhsSS.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"432f631123e229c4f11ffaeac5f44850","sha1":"4d6f7cff6e1143a69fd4322621eeeaa9b7470f91","sha256":"55b55d8957c2702e025a4f62f9547adb9a2041de9bb2f9d4a65eaf09f0c80354","sha512":"bba8fae0a4ad1e749a1354afdb495c90a2afe7269064a1f0ec0ae45a98ff2cbd2657c90e8d0837aa01e36e338b0926dc28ea050272814c0e24afdb122d11cf05","ssdeep":"24576:dYkIOcKWl8G9qvWAhzLQ137XFzmRQ964SrWM:jIOcd8G9qvWAhzU+RQg4SrWM","tlshash":"15551ad472917491c2a26e90446f900be33efca4688c5469b717ecf72cf4a89552bf3e","size":1350931,"data":"","first_seen":"2025-10-13T14:15:12.923055Z","last_seen":"2025-10-13T14:15:12.923055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/Br-9nVrj.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/Br-9nVrj.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"Br-9nVrj.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"8cb586d292a0a118238e37f97b0e1cca\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j5dtj-1760364886597-8ccdc5a848a8\r\ncontent-length: 1947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4177,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1644)","md5":"cc109c0bcff9f234e797fb12d841fe4b","sha1":"0ff0033b37efba383e7ba12e4ddc10a7dcb63cbd","sha256":"f2a9945354dba1edec05b42e0a330f40c3e8e86bad889b48fea8b493333df6b2","sha512":"182c839fc7cad422e56a85e1a4224d82cc1645bef4de1274720847555aa4cd0c0d226fccbc60b3a1d759593b69db69fef486a866660757c24f1fbc12377391ce","ssdeep":"96:LdMWMbkq12FzFi3O1fTZ/gJ9LTspI5T+gaYwFh501FIZz9:LrMbkq4FzU3O1fTZG9LY3g+h50PIZx","tlshash":"0c816109534f8ebc600acdd823677422378ca522b31e8ec081e4d521d47fda9576ee9e","first_seen":"2025-10-13T14:15:12.777315Z","last_seen":"2025-10-13T14:15:12.777315Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/Evs7_YCw.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/Evs7_YCw.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342859\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"Evs7_YCw.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"bd19a259db2192d096717aac58ffd61a\"\r\nlast-modified: Thu, 09 Oct 2025 15:00:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::whzrw-1760364886602-751974dc6c1d\r\ncontent-length: 818\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1405)","md5":"e04a562c69eb9e0d12bd7b09009fc03d","sha1":"4672a48eb0eff54f9ae7c64f91a344cb2c90e833","sha256":"96dbe91046075c42e11e63e75c71aaf34544cee09b94b932187d6ec59454730f","sha512":"0c22a7519b5bfd04e90b33645300ba115d287f4668a4c0c685c29cb9f3734190e1efbefaf9a4a9b376c5a66bc3ee34d20ae96c4e7113fda57f6a7ac81709072f","ssdeep":"","tlshash":"bf2101df91d9c5fd40360daa6844548122262328d7b9cf90d5edcf2136500ca9857afb","first_seen":"2025-10-13T14:15:12.782006Z","last_seen":"2025-10-13T14:15:12.782006Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_vercel/insights/view","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/asset-recovery\r\nContent-Type: application/json\r\nContent-Length: 177\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::j5dtj-1760364887144-f6a8003293ee\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-11T10:58:56.269422Z","times_seen":362790,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=tether,usd-coin,dai,weth,polygon,wbnb,binance-usd,arbitrum,wrapped-bitcoin,optimism,avalanche-2\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 16:28:35 GMT","end":"Wed, 10 Dec 2025 16:58:50 GMT"},"fingerprint":{"sha1":"CB:DD:AB:58:CC:53:EE:A8:1B:A9:21:9C:35:0F:22:29:C0:FE:6B:FD","sha256":"62:E3:E4:A4:6A:BD:9E:09:EF:78:C2:63:F0:7E:CD:E6:51:23:C9:86:35:51:95:86:EB:58:66:2B:F7:65:53:1D"}}},"request":{"raw":"GET /api/v3/simple/price?ids=tether,usd-coin,dai,weth,polygon,wbnb,binance-usd,arbitrum,wrapped-bitcoin,optimism,avalanche-2\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"adfc0b3d4160fd9dd3e460f4f7d01dff\"\r\nx-request-id: 97614ca0-570b-476c-aa57-b2c7ba5efd4b\r\nx-runtime: 0.007829\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98df7203b88fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8f13fa1528aac5376b6e00e71b8a8f7a","sha1":"0d0d5d90f07edbc9880a0c2b09fca5cef946ed33","sha256":"5e786d91232bd8b62b76e397599db10c15ca4b0605f3d9cedfbad34163a7aa30","sha512":"3609be994ff3cb95ffaf15f2ec38af75fa724cc294902096dfa2367992843fc9599345214a896f8dea6123c12390de138472c6a40661e8341a99aa83f78f6f78","ssdeep":"","tlshash":"dad02ee483b10dbb0b2468b8cc2a33e0e813d478d8ad0321604dec814dae2df61002e8","first_seen":"2025-10-13T14:15:12.785974Z","last_seen":"2025-10-13T14:15:12.785974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/ico_null.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /ico_null.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"qfk7yq\"\r\nlink: \u003c./_app/immutable/entry/start.Dlzz3R-V.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/CF562PFW.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/BuB7Ymj8.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/BRTrXkgU.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/entry/app.CnULT7o0.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/C1FmrZbK.js\u003e; rel=\"modulepreload\"; nopush, \u003c./_app/immutable/chunks/IHki7fMi.js\u003e; rel=\"modulepreload\"; nopush\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-sveltekit-page: true\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::26mgp-1760364888291-44249f934de7\r\ncontent-length: 799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":799,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6319e9da7c44453e66cb821d0fe7169b","sha1":"82eb1e186d03839077b944baba39d203337e8364","sha256":"eaaeae2321afc23d56dc317fffc9a3d24972f7d74379de50d2fd0f82e16fce96","sha512":"4b3a948a21a3d0f1140a5a47e26725e2621f827bc9737d0a683fddfdfff9e01c3ceb8e790b2127f448af65df460e62e0b08909ec974fded8b7a3c1a073a27f91","ssdeep":"","tlshash":"8501d0cada5c5c174105437d29a3f29c0b6fe1b79a404cda38cca9652fd6f448e47a88","first_seen":"2025-10-13T14:15:12.790857Z","last_seen":"2025-10-13T14:15:12.790857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imweykdbnoiuemaelnnb.supabase.co/rest/v1/z_tokens_price?select=tiker%2Cprice","fqdn":"imweykdbnoiuemaelnnb.supabase.co","domain":"imweykdbnoiuemaelnnb.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"GET /rest/v1/z_tokens_price?select=tiker%2Cprice HTTP/1.1\r\nHost: imweykdbnoiuemaelnnb.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\naccept-profile: public\r\napikey: sb_publishable_3obTunfmXb4ox5KwFFUFFQ_tdSDQshJ\r\nauthorization: Bearer sb_publishable_3obTunfmXb4ox5KwFFUFFQ_tdSDQshJ\r\nx-client-info: supabase-js-web/2.57.4\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-range: 0-3/*\r\ncf-ray: 98df7209187923eb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://www.wallettools.org\r\ncontent-encoding: gzip\r\ncontent-location: /z_tokens_price?select=tiker%2Cprice\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: imweykdbnoiuemaelnnb\r\nsb-request-id: 0199ddec-81b6-7bdc-9e76-a7c3ba3296e4\r\nx-content-type-options: nosniff\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 13\r\nset-cookie: __cf_bm=5CnRwAx3pPOn_sounrR62GWkYo9zC5b3d8ZYY1X5Cfo-1760364888-1.0.1.1-uX4oYR6XA8.iINnfjgs6uxIbwAp9hkB.MmPTv4CHFTRMNRojIc8iNXknefzt1C3VU8UHhk1Swrx8y6d_ZGyX072OdyQbwPHvK8rEHjhQHts; path=/; expires=Mon, 13-Oct-25 14:44:48 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"573426cf4a1ac24069d03e6af5a0fe68","sha1":"a58da8546234f91f0c1a97796a435dfa5dfff991","sha256":"14d0686ebdfe1e119639df412c9f1d057ef3cc8191eefe69c0165cb2101d0e15","sha512":"dc8ee7de95ea24f88d2b5ad85cd4da3b7b559969450d5cef0d0c87d32336fd0124188c87d2a7234161d941cf3e92311faed4795303f32b5fa45d67053dedd9b6","ssdeep":"","tlshash":"b9c0922f48bc8dbd82d0e410e88b20c321fa6f280b39431700f02c988932b6f28c25d3","first_seen":"2025-10-13T14:15:12.793224Z","last_seen":"2025-10-13T14:15:12.793224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/CF562PFW.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:45.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/CF562PFW.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/start.Dlzz3R-V.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"CF562PFW.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"a2145caf3a4c6e2c7e680353e09ebf45\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hz75q-1760364885834-5d797fa0b6df\r\ncontent-length: 13617\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31112)","md5":"c2b973278daed317eea247bc97fd6d78","sha1":"62be0aff3e15b91b786bcc0b88c2b11f71cf6aa4","sha256":"815ab71472c68cbce8acfb94c18b007297921d8bc20ce6194255a241687b33dc","sha512":"8284aa6aa0e642cd2849a10bdf5651746533ce5d79a517e27863f0e368329e6354aade72c76c9945791dc4dad8c088b48b2f794c472d57459d8d3d0fe83e9e6d","ssdeep":"768:MoFSlIk9sL/v0J21CzZj/FxCsaobKHyLIj1PheT3GqmITHZgoXUtIeKEQkz0h3A3:9ezZbtHEt2xxF49","tlshash":"88e24ce430f5f07726e716e180bf1212b2292517340ad4e1b19ddd56292af4b8bbbf2d","first_seen":"2025-10-13T14:15:12.802072Z","last_seen":"2025-10-13T14:15:12.802072Z","times_seen":1,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BRTrXkgU.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/BRTrXkgU.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/chunks/CF562PFW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"BRTrXkgU.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"b6fac7d038784c2e88bff70483ac4ddf\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4ltw-1760364886058-b5f781d19aad\r\ncontent-length: 925\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":925,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (924)","md5":"b6fac7d038784c2e88bff70483ac4ddf","sha1":"1704ec26745a66eb7e47ba05dd29612bbee6632a","sha256":"167feeaebee35f1ef19a60cdefebd3f1b328c1ea08b6bf4b561edb7eebb89cbc","sha512":"bf9ed2e94c238b57840b623dc93ddfc950b6302eadc4d6033054521cc0906fc51f1ca3365f255cfd52d9064a73c8c2efd06cc429f4e886ecea0df146dacf01ad","ssdeep":"","tlshash":"8511b18c359120b2a78918e985ef18598235ac05340f9594d59825837ea27fe52ead3d","first_seen":"2025-10-13T14:15:12.804687Z","last_seen":"2025-10-13T14:15:12.804687Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_vercel/insights/script.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 194232\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\netag: \"818a844442c3bbb98d1e0c989b7795f8\"\r\nlast-modified: Fri, 10 Oct 2025 23:34:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::29sl5-1760364887079-3db10bd9a9da\r\ncontent-length: 1222\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2383,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2383), with no line terminators","md5":"f76055e209635f87ed02854d70b56528","sha1":"d8c76e0ed7155db45d01475829461a1393fb52a3","sha256":"b9a3180c017f7b78f9a4d71992e83ca63598ae16c15f5e89638bbf17b57869bf","sha512":"be5cfcba0dc68822f5bd2e9bcc1a97b628ee7e5c3051d8114238ffc9107bf256d6abfcbc7300daa230c7c1b6a7f2a2e98fcf86deb2ab807cac1f743c0d27c579","ssdeep":"","tlshash":"c44199da7960b1294ae651a0853fa655b3bb2b93bc41411131c58dac3334e1ef3a3e95","first_seen":"2025-06-12T01:15:21.739215Z","last_seen":"2026-07-05T03:17:04.087157Z","times_seen":3094,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Linea_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Linea_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Linea_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"3f35bcc7b60f4f1fdd5fa698cc75d519\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j5dtj-1760364888257-ddb0a882616c\r\ncontent-length: 1634\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit grayscale, non-interlaced","md5":"3f35bcc7b60f4f1fdd5fa698cc75d519","sha1":"c3c483dceeadfdea242b149fcdc279b3b1acaa6b","sha256":"f43131da61e523b26f5fb4197a563ca82e5d0e543d856982e168b7e6d663eb4d","sha512":"29fb6b6f8af59e0927ca1201711186310f29bfa0b5d397293202d7e78426199d829bb7a42c9f7380ee15ed132999d20680b6cf75faffbd8d2c6466bc3c84268f","ssdeep":"","tlshash":"e631f8e9b639e605cec2e72405542b00e5bb19cfa7e700c77409c6605b59e8838f5bd5","first_seen":"2025-10-13T14:15:12.807892Z","last_seen":"2025-10-13T14:15:12.807892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Berachain_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Berachain_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Berachain_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"ccf26379586a04166ea000b48dbaac86\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k7lj6-1760364888260-172c6de6f51f\r\ncontent-length: 3671\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ccf26379586a04166ea000b48dbaac86","sha1":"911b72c218be62ce5e011b87fc6cac19ff0a6cd3","sha256":"e6ce7f9dedd3430b3566c2364e7da3f1d27e0812855b6865908fab4e5eef3c06","sha512":"c80375d761818965477f5a425adb35e7dc67542945863e29dfa185d190e60acc9bbc89ac8d9a23d2f53fd6860653d1061e9feb27299499831a4bf509c4459171","ssdeep":"","tlshash":"c9716fb7c871d7d1a97b34bd321c3270abe152a39446c94603695e2eddfd18850474e8","first_seen":"2025-10-13T14:15:12.809734Z","last_seen":"2025-10-13T14:15:12.809734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Scroll_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Scroll_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Scroll_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"ce19af6428ca794959e21af487e47562\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wfl2d-1760364888263-a1461c39d7d8\r\ncontent-length: 1890\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"ce19af6428ca794959e21af487e47562","sha1":"303d4c2e6f242bcf7cad38c0435075a6bf9fb5cb","sha256":"5f200ec1411ef734804919171b0704609b3780e7d691552fb40349a3cb732fd5","sha512":"f79de11df480e4a60d000f5606648b851e72d2354df5a6aaef1f6bd97b2907b529e72211b1872fcadd8806d12ea423992f0ab2b5d848bce41ec7b492be4cc934","ssdeep":"","tlshash":"194119edb01a83c8c11195401b656699e8f883668a23df8e59d4e3eacc9cf5cc91c2a1","first_seen":"2025-10-13T14:15:12.81191Z","last_seen":"2025-10-13T14:15:12.81191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:45.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/entry/app.CnULT7o0.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"app.CnULT7o0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:45 GMT\r\netag: \"1947cf9694c9c63e7fe157e8a28a6408\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k7lj6-1760364885544-434bf715a5d7\r\ncontent-length: 2838\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8734,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7842)","md5":"df1d9095464fa453bc7f47e3aad0d33d","sha1":"f45b97b5c2d6b8dfbcb7acff980de44ef03c6c4a","sha256":"ecceb4f8082cd11cf952e34cd4339a8054030b202ab2479b8ea89916651ddd75","sha512":"8fb050ed2dfa0e369e301ba352f1d1f4755f23dc46fec1a4a96f730540229644def4de55b56fa68be5b05f0a3fa277408082b9bc6d6f2458b38d6154cd9dbc9a","ssdeep":"192:8NkLw7Ly/b7pv//R+o8OwfBOIaGAdj5bHW+LjuBr2d5wL9OspKT:OkLjJRLrX7x5bHW++ByL8Oga","tlshash":"a602a4d76005f4fb28ea8cef951f100053b43965792fa121592c8c79ab2d9b953aac3e","first_seen":"2025-10-13T14:15:12.813338Z","last_seen":"2025-10-13T14:15:12.813338Z","times_seen":1,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/C1FmrZbK.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:45.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/C1FmrZbK.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"C1FmrZbK.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"1e40d29f14fbc073f1ff524e72f543ca\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6vlrr-1760364885891-be97e4d8de6b\r\ncontent-length: 686\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1141,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1140)","md5":"17d364f6a55a02cc2a058c5c8a5e8d68","sha1":"b9bbac8b3626d3dc8c1916cc6e1a43420d51f78d","sha256":"ddabd08ef1896dd07a2c2a8d01a9963d181dcdaf1d3cb917b321965c3937dde9","sha512":"9113fbda524aa8c818ae8468230b44024e4da84611fcb41eb043aa4dedeaf585056c78f84299a4211a656b8aff8a09767d8f17c7452c008dca715c898e933d31","ssdeep":"","tlshash":"3821639621d4e03212a95ed5f2f0a3d3f9e02897b8111491900fcd526f1dfc5d1eae5a","first_seen":"2024-12-05T16:17:54.649321Z","last_seen":"2026-08-11T10:49:04.085462Z","times_seen":3616,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/assets/ProgressBar.DwUOSGVj.css","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/assets/ProgressBar.DwUOSGVj.css HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"ProgressBar.DwUOSGVj.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"ba98a9f66fbc684da6b6b8fd2c7255de\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gpgvh-1760364886459-2990daf2f946\r\ncontent-length: 277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ba98a9f66fbc684da6b6b8fd2c7255de","sha1":"6fba679fe3769d6271122d47a3a41d35bc3fe740","sha256":"05e4960c5ebdd20ab9619cdfa8c92b07fbc7a43aae40ef30b1a4b5434bedabbd","sha512":"1d8e4cd9f11619c2a5d6eb270bd05bc5a399c0d40f74b37ef66e152cdc3c8359ea6e36ee4782bc9a9ecf36952f75e0fd456781777a64bfe04119f1c3df320f0c","ssdeep":"","tlshash":"06d012859b91401c02421a129ff58ba8660cdd9391660c9d33d5185a55619cca3fe31a","first_seen":"2023-10-23T20:09:35Z","last_seen":"2026-03-25T22:24:37.207738Z","times_seen":7,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/1.vVQ5Nf8m.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/nodes/1.vVQ5Nf8m.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"1.vVQ5Nf8m.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"86a3946bd9eb1dc5ede270a6492aa1c9\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k2m9w-1760364886477-310c77c96d1c\r\ncontent-length: 2393\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4882,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4879)","md5":"be815b27f1aa28c08c394d64e04a5578","sha1":"2f3dd5cb36f7a8c7c8539dc4231942fd5c13bd83","sha256":"81f8f687a7624eaaf651a1ab18b4d9c3d4fde1d302a0f6aa870aa86c4d135a05","sha512":"23406a031d7a2f700274b864a1b82a92e60e2bb1b13a43917ccbc797435cc76eca6daadbcc1859e0a699bfa4935cd8eb3eb97c7dff199f11ee192b89cabc1a1c","ssdeep":"96:eIRAmZd7pnvoYaTMg0ghFH7IWJEdwX3QBR8B9qDDXyhBy/Rag0I7Yelrn+yZd0nU:eImmZd9nCTqgTJEdwX30RmsyDqRzvlrx","tlshash":"a9a1daeea046e4bf69770cb99588d001a124079df83d49a5d17ccc7166c88c8a357efd","first_seen":"2025-10-13T14:15:12.816979Z","last_seen":"2025-10-13T14:15:12.816979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/metamask-fox.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /metamask-fox.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"metamask-fox.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\netag: \"c978e938045ab2a4160b693a540156c1\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7mwm4-1760364887092-0e899aba7a95\r\ncontent-length: 1765\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"data","md5":"f8d34c6c4faeee045c8ba42bf41b38d1","sha1":"04ab126dbfbce6d6e079e3e2c919d4a11f014cb8","sha256":"684c33c5af2d9b05a3fd400266259b48ae252ca575e07668180397f1aa3aa659","sha512":"9f6c2b2d03ace35405092a228d287dd38a85262827aea838664b5a756a37bf60714a5ebf6bc101aae79d7008ba78c28867b77d987531b3b89e81b5fa8e04827d","ssdeep":"96:brNwGe/3ODHHhS7B+4/382gJqOj5WjirRRTPPZUPaZCU7:5e/yHBS44/382gQOVrRRTPPZUPaZCU7","tlshash":"1ee1082ddb555f9b60a2cb1998d60013b9b118c1ee3c9fcb10de0f2c465690a78d2fee","first_seen":"2025-07-14T15:25:07.979825Z","last_seen":"2025-10-13T14:15:12.818449Z","times_seen":4,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/avax-token.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /avax-token.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342791\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"avax-token.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"73675597e674beb1ccb7103ab33c276b\"\r\nlast-modified: Thu, 09 Oct 2025 15:01:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q2stx-1760364888248-1cec7073c0e5\r\ncontent-length: 7817\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"73675597e674beb1ccb7103ab33c276b","sha1":"4c60ad7d84033fd98766fe4f1baab6deb988d540","sha256":"d3a5b45a1ab4f201fd8ca386499924e4550404f0cf69bc17e3f475658e45a64b","sha512":"d21e5e9d96a70754ac94eae0be7bb10895a30f88f5341bca59a9a7370108e9003fc699bc71cd401a993dc2b8b552abace59f4761c6ca74fd00c4474995813b1d","ssdeep":"96:D59/cfPqFRNhH+HOOUV40sSq6g4/cHfF/zv0/F8lBa/1AIVjwESwSHJzmw2N1Ny2:F18Pil+Oa0sg/O/zvwVGU14g+OmO","tlshash":"0df18d2a24919cf80268e92bcff9a9f3d17f140db5a55bb91852bed78f6189070e4680","first_seen":"2025-05-29T09:28:21.448886Z","last_seen":"2026-07-30T05:48:28.327095Z","times_seen":38,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Sonic_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Sonic_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Sonic_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"512840255119adc4ae39e3bda4318294\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g7rnd-1760364888265-c87a14a89f1a\r\ncontent-length: 3647\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"512840255119adc4ae39e3bda4318294","sha1":"94831ac0b6e38c0141b2b3b4b91435917020c29e","sha256":"3a054a42ceafcf84a1f05368a333e415ad15efe38e4393db98fd986f35ddf8bc","sha512":"1f8478a9624654905e76e873f93d78a50793046c1183d27919057011b60b1cd9a7616b327aa1d234685766ec6011c82bcb43a0c0a471cc104178b1c7d2342a14","ssdeep":"","tlshash":"b6713aed1715b1eac5c80242656916988f8197d3225a8c928284e5815e372accefe68f","first_seen":"2025-10-13T14:15:12.821322Z","last_seen":"2025-10-13T14:15:12.821322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/api/nots/geostat","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:49.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"POST /api/nots/geostat HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/asset-recovery\r\nContent-Type: application/json\r\nContent-Length: 249\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Mon, 13 Oct 2025 14:14:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::c29x8-1760364889226-0b5d2ac62496\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1178,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a9d91ebec0d9dc1f65f610fc06076c7","sha1":"c2039518fa2edeaa58dd3ab171fbbd4c45580a25","sha256":"396d795ef723411eb2e3020985a0f34e23c251d4eab466239be2eaf6466ee6c5","sha512":"dfc0932736085771e7dc2cbaafe6bba0e113a1dd57139f5cb1a7bcfad6bcbcf41bae7d34b47c5d863cfd89329d1aeb57f9d04a40c2b87d4b15340aff5bb7d650","ssdeep":"","tlshash":"ff21ce468d14acfd82d6a78b24923e079cf8303380cdec52c4dcc620d2a9a95616a65b","first_seen":"2025-10-13T14:15:12.822497Z","last_seen":"2025-10-13T14:15:12.822497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/assets/all.DqFAhJw4.css","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/assets/all.DqFAhJw4.css HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"all.DqFAhJw4.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"1281df901845aa926b3202355891c303\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bwvnd-1760364886472-c47c2b643834\r\ncontent-length: 14816\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":102655,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"e15e69c6a3e2c92cd311e618847ef3bf","sha1":"067ef117388458179d3f637b7267fd81f2eebd03","sha256":"3f48fc0ec63763b22ddf9ded9a95095a9c8de91c47a5e9fcb54fe65628160ae6","sha512":"3d3fd5a068ad8aa52bcb0d16f8b721976cf5ca9c7361b6cec135919c5e23eac51726db2984857d2130c3d67dab206d5fcc1f62d3729224cccb62f3a599a131e3","ssdeep":"384:kwfk78vAeK+w6DCNWmir5VUGxdMFLvSsAZP+cgckcKNHcg6Ycqm4c0/l3BL8KvYh:MueaXq/l3BJ7E/GrSV27pSJ","tlshash":"5ea3fe6cf584403f6c6768fe936ea99ea22d60c19e295beefd049a314ac13f71dd3110","first_seen":"2025-10-13T14:15:12.823777Z","last_seen":"2025-10-13T14:15:12.823777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-QM237H0Y3N\u0026gtm=45je5a80v9172075647za200zd9172075647\u0026_p=1760364887092\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1677084273.1760364887\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1760364887\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.wallettools.org%2Fasset-recovery\u0026dt=WalletTools%20-%20Recover%20Your%20Crypto%20Balance%20Easily\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=8564","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:52.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-QM237H0Y3N\u0026gtm=45je5a80v9172075647za200zd9172075647\u0026_p=1760364887092\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1677084273.1760364887\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1760364887\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.wallettools.org%2Fasset-recovery\u0026dt=WalletTools%20-%20Recover%20Your%20Crypto%20Balance%20Easily\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=8564 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.wallettools.org\r\ndate: Mon, 13 Oct 2025 14:14:52 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:102:0\r\nreport-to: {\"group\":\"ascnsrsggc:102:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:102:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/favicon.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:45.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:45 GMT\r\netag: \"c5414c670332e0d2bb65fde1f3237bf9\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7mwm4-1760364885448-4c406917786a\r\ncontent-length: 34395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c5414c670332e0d2bb65fde1f3237bf9","sha1":"581e2b9b62bd8df170bf6bb34e6ff274f0cef595","sha256":"9fe8a562d0a83c7da880fb836cf18448f07838e273154a704fe5b5dc7c251fa6","sha512":"83721bdf4a289b8ff254b6ac47630c640072771562583a3e22aebd80a67a76922e151ac36a2c5793c8adf08c10266774392e2dde85ce62ecafc26a227cc9373d","ssdeep":"768:neIWgNGJW6b0Tn3eaK3GKVwGAfNUXuHcpw+q24gl:ne5lrbu3rK26XuHcSXA","tlshash":"4ef2e183709f829200c5aeebd1a5509c989edd8c4e0c9228fdfb9fe1dd117b15a6126b","first_seen":"2025-07-14T15:25:08.005913Z","last_seen":"2025-10-13T14:15:12.825742Z","times_seen":4,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/entry/start.Dlzz3R-V.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:45.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/entry/start.Dlzz3R-V.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"start.Dlzz3R-V.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:45 GMT\r\netag: \"4e9317c59905b811fb93c8077aa11fc0\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k2m9w-1760364885544-0aa89da83b6f\r\ncontent-length: 83\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":83,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"4e9317c59905b811fb93c8077aa11fc0","sha1":"383deb4fe4a3f1cf8af238004ed1b95ed5350b01","sha256":"7900a10f25bb30ea9242f286a1aa1306bedf060b697f75890b51ce547c479012","sha512":"befafda10573f51c7018bab1c8ec26ca66e58efbc46cd8fe6439619421437fa7614b7070a7de77fb49687ee5b3acc2ae000a121bb60421d9e96be691d4db4164","ssdeep":"","tlshash":"43a0123a04006470440b1848d240c30041147c7553b012420018511e8dc00c74209952","first_seen":"2025-10-13T14:15:12.831867Z","last_seen":"2025-10-13T14:15:12.831867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/nodes/4.CzOlM9qN.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342774\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"4.CzOlM9qN.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"2c4b9b25441ecd4c14e6b0be97c03ec5\"\r\nlast-modified: Thu, 09 Oct 2025 15:01:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rlrg4-1760364886488-23a9aa753e56\r\ncontent-length: 137373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":386442,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57445)","md5":"bb67ee753a339fe8e6f9253c655bc6f4","sha1":"638df7d769d3d8ff843023530257379555ec8694","sha256":"c8c24a0837cdaac45788c9ffef8a8c4cf42efdd9b83b4d87ba5ae424eb8ceccd","sha512":"ad01e1e142d3fda452c62e455cae20d234180fdc71c16ee44f0a696bca955c271096be1fa0dae15d86d215b317f0190f073bc6ab45eb6b0f1c507fde19c7c250","ssdeep":"3072:HI8A13W3L80MYYwxilHSo4IthItKNAEM0cprAhmxgKxALvMaGYAo0FjEfG17KT44:JkJZlHzDAEafItOjv1OTg2SPGT5r","tlshash":"2e844b9433a1707683aa18e0147f510ab23ab92da449485cf258e8f77cbdd84667ff3d","first_seen":"2025-10-13T14:15:12.834067Z","last_seen":"2025-10-13T14:15:12.834067Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/B7beDMSV.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/B7beDMSV.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"B7beDMSV.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"f37903e61252f52a80251903cc34a340\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z8gpk-1760364886591-d23e9cf5f6af\r\ncontent-length: 15139\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49570,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38827)","md5":"25a398195c1d95accce12962c857cd2f","sha1":"c986169c6550991b31231156f09e8a339877a4c9","sha256":"2c7e74985c5cfdc3b04847e74d96337954c1b919312e66f553d2832442c9e307","sha512":"8788fde13c1fed772ce0ae824cd5068b446f2d88ff877c0c04ca6921ef18e923dd028629ee48ecffc61e53b66a13bf3362c5a016a0fd7aa5eb8d81c94a23e789","ssdeep":"1536:jN3NpnQ2oY8WGkk3vq85ETq3e3BkmdrUEC+k1BF0:jN3NpnQ2oY8WGH3vq85EW3e3X","tlshash":"2a23a490a18572371a5313e4846e1309af3e7874a7cc9427b25dded72c62c8a4a3ffb5","first_seen":"2025-10-13T14:15:12.836503Z","last_seen":"2025-10-13T14:15:12.836503Z","times_seen":1,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/favicon.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\netag: \"c5414c670332e0d2bb65fde1f3237bf9\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rlrg4-1760364887633-fd2901a5b24d\r\ncontent-length: 34395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c5414c670332e0d2bb65fde1f3237bf9","sha1":"581e2b9b62bd8df170bf6bb34e6ff274f0cef595","sha256":"9fe8a562d0a83c7da880fb836cf18448f07838e273154a704fe5b5dc7c251fa6","sha512":"83721bdf4a289b8ff254b6ac47630c640072771562583a3e22aebd80a67a76922e151ac36a2c5793c8adf08c10266774392e2dde85ce62ecafc26a227cc9373d","ssdeep":"768:neIWgNGJW6b0Tn3eaK3GKVwGAfNUXuHcpw+q24gl:ne5lrbu3rK26XuHcSXA","tlshash":"4ef2e183709f829200c5aeebd1a5509c989edd8c4e0c9228fdfb9fe1dd117b15a6126b","first_seen":"2025-07-14T15:25:08.005913Z","last_seen":"2025-10-13T14:15:12.825742Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Hyperliquid_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Hyperliquid_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Hyperliquid_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"f83e3ece68dfbd1f7ca4b53fd9f08524\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76mw6-1760364888256-940921eb3574\r\ncontent-length: 3263\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"f83e3ece68dfbd1f7ca4b53fd9f08524","sha1":"3895b3921722468a2ffcb9ee668e3729e73f4f1f","sha256":"9374e6ea4216cbe6b6a3741dff5b09144776b1aa409a0cdeace55a892deb3ac2","sha512":"9ae4c60bf4ff50e268a49ed36153cac39f6e9aba1d38940f0c06f24ae75286c184389aa5b27719bf9526b8100ba04364cb14d5e954605e14120974cd2d622fc7","ssdeep":"","tlshash":"9f615cf495237e0890608e17bccc6f713a1b5f569703d84166a1fb336ad3f1492acaa4","first_seen":"2025-10-13T14:15:12.838611Z","last_seen":"2025-10-13T14:15:12.838611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/IHki7fMi.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:45.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/IHki7fMi.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"IHki7fMi.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"a57d2a0c60b30e0abc0f7461358f4e44\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zn6np-1760364885927-0d85e2270821\r\ncontent-length: 90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"a57d2a0c60b30e0abc0f7461358f4e44","sha1":"83ad8c69c6880cbe5ea6873d14d3364b4647bf4c","sha256":"e3a14a7d740378a641b90080433ba7b5a949219bf55db04546d151e79d7292d1","sha512":"5785374ce11683f40d2d85da8c4b176a649edea991832b79f37fd143aa1e9256280974b8d2a372120e740d3c82575d44b97cb1ff2bed8d91f34d406add58330a","ssdeep":"","tlshash":"2db012413804423100f1150f52326700b1881379341471f2c290143bb9cfc03cb002a1","first_seen":"2024-08-19T23:06:15.011977Z","last_seen":"2026-08-08T10:43:51.269777Z","times_seen":2377,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/C_0Aez0L.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/C_0Aez0L.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/2.CCx-5SZP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"C_0Aez0L.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"54e3e22f8a8a150ab020f8662a0636d0\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7mwm4-1760364886695-4d79556c023d\r\ncontent-length: 5507\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17699,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (17532)","md5":"484a5baad6e75621f0699ac9c4aced97","sha1":"0fe910726c97e780140026bbd65feb30dff9b4ed","sha256":"77544aba40b7b9f4c8eed03b474edbb39ed3632723b537ce31b9bc6a3b25672d","sha512":"15f1a1c3f59c79740a72c6d7f486e02579d2aac4d516dd77bdd02ec7d1a3529870449ec895d499b3dfe112627a05f753502b1975374911dcbe3a2cc5b10ef963","ssdeep":"384:koNz6NTbxcBEnA0z4KUaGFbXe8uR7tJUurTTt15DNDlg1KkjDEYn9uk6:kokHxVnA0zBUaGFbXe8uR7teurTTt159","tlshash":"9982d9ea2575f4fe10bb5cbb90270010f3b42168fd1e5940d7ece8a12e6067867a3f69","first_seen":"2025-10-13T14:15:12.846154Z","last_seen":"2025-10-13T14:15:12.846154Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QM237H0Y3N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-QM237H0Y3N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\nexpires: Mon, 13 Oct 2025 14:14:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141294\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425163,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"f2c3dd5d70c294be8d1e5d80bc305f3a","sha1":"f4bfe496f9eeeb5a3c8a478fedc910f704aa1ab9","sha256":"5a02d13177a934869ac821240a12b04f8afb0cbd6f7fb105e16450120ca0c3b0","sha512":"c48b4dcf863720f081247ff305f4d00fbc1f6eff76f454f5b3b885f4633bc13d743d8646523e52992f0a8faeacd0703786aacaca197e5ba50ac229ecffe8205d","ssdeep":"6144:/B9D/yp2a4tk0uwbWZJT+Nju5204O0NsYXdXAQY:JEYJm0KZJu0O8","tlshash":"8f9419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-13T14:15:12.849199Z","last_seen":"2025-10-13T14:15:12.849199Z","times_seen":1,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":101,"dns":0,"connect":8,"send":0,"wait":36,"receive":25,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/matic-token.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /matic-token.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"matic-token.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"6935d4ad7b3520f7c428b3ccc35f163b\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q2stx-1760364888253-e6d194de8f35\r\ncontent-length: 16286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16286,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"6935d4ad7b3520f7c428b3ccc35f163b","sha1":"5995bc372348f2f9eaf4d71a514210905d26a8d9","sha256":"a600c5c58616e4f48a29eb8709ebd7365fc7e8cc3ad922f573477c14371f974f","sha512":"8350e4ee27418f7c98fa12e9aa9c07c1fab0874560782b1135b32754234cb04e1ed5494b918f48ce443c60739fc6ce035c972a25b7e3cc9152dc7f186a5bac07","ssdeep":"384:XJdfSVIGvy5JVO/021oaSHAjlF1eZ30PXtYT44ABu:zKBoVO0GF12kvtG444u","tlshash":"b972c0614b3b0e30add309f0cfe01d5d81a16964624ff61e75a9c8b2af2360415a7fae","first_seen":"2025-07-14T15:25:07.981158Z","last_seen":"2025-10-13T14:15:12.851771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Base_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Base_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342791\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Base_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"231b75756be92cc7cc0e7ee3a79c5a50\"\r\nlast-modified: Thu, 09 Oct 2025 15:01:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z8gpk-1760364888254-a35b3b92216c\r\ncontent-length: 2607\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"231b75756be92cc7cc0e7ee3a79c5a50","sha1":"23d34bc94ac178c86225f4896c0285d26ce40846","sha256":"c5e91168e78f86fa1828d49ecf17a90f66f344909e8b8aabcc65d34471b72aad","sha512":"8473fd3a7f2066d3b62147efb4ffd5d66d27c4c4d6a5fb8ba32e2acd46dbcbb6f93bcbed6e19f045142ae60ac726868023870b8dec5df4e4df2d3a3b79c412d2","ssdeep":"","tlshash":"83513ceeb31c5578fe130d5b3e5f65c94201764ba72b6104848699c12d0cf1e97ccbc1","first_seen":"2025-10-13T14:15:12.854352Z","last_seen":"2025-10-13T14:15:12.854352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/arrow-down.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /arrow-down.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"arrow-down.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"a188f3b33a5386e8d78b599ccbf02b52\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::98w5p-1760364888268-e2d74f20c941\r\ncontent-length: 237\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a188f3b33a5386e8d78b599ccbf02b52","sha1":"3f0dd181e0eeec493ad38ea8c2eaffebf9bb67e9","sha256":"abe57183266b029cd4ce1930f075bfd65390348a7c3d2a869af4ee0abf0941ca","sha512":"180aefbbace509b2340f0ba57630078c4d31f8d079a2984dcf973d17771113712299383530a9b694524de868a11cae6d2a74863e27e929d9a50f2cf455107c55","ssdeep":"","tlshash":"74d0233dd05d504c890e96514c1d74400ff571e1c0d40157b259dfb011c7d437443f60","first_seen":"2023-05-30T02:23:27Z","last_seen":"2026-07-30T15:40:47.473653Z","times_seen":44,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/export.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /export.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"export.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"c9c97d8d8c8ac888724d9b4048c04ba2\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fz9q9-1760364888291-cc2e34418760\r\ncontent-length: 518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":518,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9c97d8d8c8ac888724d9b4048c04ba2","sha1":"5012f633800d43215a061a341dcbc668b7d4a7b7","sha256":"09597b52f6bc846ecf0acf40c9b01719daf01cc6716c380874a162e3e16afd9a","sha512":"0d6017c84b0f03cf3afa577d99d822fb35e831fab44a529c6f97f245b34592f0c45926b8adfb3cc93964fcfeba3d006da803954653eb76b407645e927c0ce132","ssdeep":"","tlshash":"13f0e0a8f5ac049909344695eeb93140d736705f04a7477e9c784271018e79d0f57ed4","first_seen":"2025-10-13T14:15:12.857881Z","last_seen":"2025-10-13T14:15:12.857881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/assets/Modal_lang.CLUZBg2R.css","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/assets/Modal_lang.CLUZBg2R.css HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"Modal_lang.CLUZBg2R.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"03020f54f806c1e12c7806aea0839b7d\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cs9kp-1760364886479-f602e7916d61\r\ncontent-length: 742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2640,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2639)","md5":"2538e9b8aa3c46d3d59f0a6520936ace","sha1":"bf2dce9a4df5c0b73d2f875704f44a7c00cdd8b4","sha256":"60cffe67d83d16e9034f000ee938b469ad7d8d23890bdef7cc2d848b95446281","sha512":"40fb34f171bcebc70fe0a6d8bab0e7489134a8aef942275533682639cebeb6ef87fb6ccb4cc750e8be9da3bda856c524822f2c4b15070f52e8299fc695390147","ssdeep":"","tlshash":"2151c70df8f585a3193fc9be8605ff96b74a87132134076abf47c9c5390862b66d2351","first_seen":"2025-07-14T15:25:07.957736Z","last_seen":"2025-10-13T14:15:12.860977Z","times_seen":4,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/D4rfOHpC.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/D4rfOHpC.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"D4rfOHpC.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"789a0dd943c032e0b14867595f3c77db\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::29sl5-1760364886599-fb5ab1f4afb1\r\ncontent-length: 35279\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":125075,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26458)","md5":"f4578ebed993a298d351fd4e3685d48a","sha1":"d96cabc7e44c0092bf0ce399dc021982f799fbf3","sha256":"d9760c84b3f5c87ab0dec6b8a1e8760c2e06e5420b9ca89e8f7c514100577ddd","sha512":"e64623f64c084920fd9540d29b6ac75c2bdfd54986c807413f8710f98ca08b8d9952474440e4ac3b30655e433f91c7ff2055246957e5e112effa6e9eaa6e3c57","ssdeep":"3072:WTvZmyhFmhMSPqeqCPiUTt2WW1+SNg4FpDJzqJKJLGJarJAJEJZJnJSJj:WTvZ3jSiXATK+SNg4FZYMoMyCfNMp","tlshash":"0ec32bc4b2b668b205c0d8e0d4361603f3287919b86dd06c767d1edb6e99e09db37e39","first_seen":"2025-10-13T14:15:12.864428Z","last_seen":"2025-10-13T14:15:12.864428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/lang_icon.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /lang_icon.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"lang_icon.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"fd10d1ae5dfe8ec777ca46b10f283265\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::98w5p-1760364888222-75770ce7df66\r\ncontent-length: 2081\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11180,"size_decoded":0,"mime_type":"image/svg+xml","magic":"data","md5":"d65c66de053bd090e6f91ed381f70f96","sha1":"5e8f54629d7883f2eefb7d6e8f62f525fa7197dd","sha256":"2d682851db2238e97dbe386a81be51c1c5df36bc291b9966f285788aa1d8ee1e","sha512":"934a78543406fc6ac9512d0e951cb0b29f076d52fbd060965b9c7467a51b8656cca2b28619db88ea83c978334dc82bdc39a1d1bd5129dac60e8415500f56cfcb","ssdeep":"192:ze/yDa+U9bdjdFbyxZcP+5eIKgm/Y8cccsH6VBAYKtoDEND1cZE4/T5Qjcg71fB3:ze/YSl","tlshash":"69321019cb55afdb60a3cf145ad61113a6b468c2ef3cdfcb508e0b1d425a9092893fed","first_seen":"2025-07-14T15:25:07.978441Z","last_seen":"2025-10-13T14:15:12.866551Z","times_seen":4,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/icon_key.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /icon_key.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon_key.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"61913158371b88bcc12b52df72274b4b\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rlrg4-1760364888224-59324dcae4aa\r\ncontent-length: 740\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61913158371b88bcc12b52df72274b4b","sha1":"70f15823b28ed0db3dbd5bd58f5eaf679dbc5f15","sha256":"b59d44f91be4e16ec4ae3e076704f833a4918a8f726dc8459f5f1445ee0efdcb","sha512":"a50a7406160065147bbd599d96fa2a95b9b3acbd1c9fc67a17dd546ccdc161ec6caee33715cc8f434f9a2292c834ee0ff82ee5a8b77a48ce5cf10318c691d693","ssdeep":"","tlshash":"1221e009835a9916c09902a4eefc8b440b31d447935621cc9fe1a975ad35872756affc","first_seen":"2025-10-13T14:15:12.867691Z","last_seen":"2025-10-13T14:15:12.867691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/bnb.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /bnb.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bnb.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"74b47672a339cf161ce7ef5b18487f35\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bwvnd-1760364888250-838c862455e3\r\ncontent-length: 2210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"74b47672a339cf161ce7ef5b18487f35","sha1":"5e7585a55c06c80a1db8d7f6768e8c60de1d6a52","sha256":"5607a00925f4d076379fa3009f8d590d349a08f46ca499873cb659032202cf85","sha512":"615e1bf1d08712e1b310beb5e7d06d1cb1eb79d468e467c1255cba989d779b88805776f5593e62e809700cddfff44d70da74b42d2539655bdbc75cb2d3b84933","ssdeep":"","tlshash":"92415c53c3daa335e2eb0d55d10aa0d89e0385acaf32d12c4dbbcd6452703b545e8c57","first_seen":"2025-07-14T15:25:07.940884Z","last_seen":"2025-10-13T14:15:12.869341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/op_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /op_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"op_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"67e81486e1e5fc6ff4d48e45cea6ea51\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fssdf-1760364888255-56b83a926557\r\ncontent-length: 3023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"67e81486e1e5fc6ff4d48e45cea6ea51","sha1":"f2574167815d6a1edcf835f06077b5258f50bde4","sha256":"d8c8e0b27280ae58a895f8956e0e1aa8c96b908b95ea17d9493950829caced3c","sha512":"f1de5497a629b78719143b887d81c4c991c464d24a934c2bcd33d087bdff26f7f0962bd2a8633d3fbe52f222be1bcda994d71dbd2a7e44fba1990daff5b7bf5a","ssdeep":"","tlshash":"72514dc39dd10ad08f09556cac1e0258f5636f3fb133c98334ca6f55a583dabe9041da","first_seen":"2025-10-13T14:15:12.871437Z","last_seen":"2025-10-13T14:15:12.871437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imweykdbnoiuemaelnnb.supabase.co/rest/v1/evm_users?select=*\u0026user_wallet=eq.","fqdn":"imweykdbnoiuemaelnnb.supabase.co","domain":"imweykdbnoiuemaelnnb.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"OPTIONS /rest/v1/evm_users?select=*\u0026user_wallet=eq. HTTP/1.1\r\nHost: imweykdbnoiuemaelnnb.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-project-ref: imweykdbnoiuemaelnnb\r\nsb-request-id: 0199ddec-814c-7c44-a44f-2c9221cb51d7\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=iZCJ3c5WElyrIYb7RQfj2FPDDiM0aMsJucP60QBL7l4-1760364888-1.0.1.1-anhHI5Sru2Ig3mKfltE0KRpBvRBZ7heEdKat_lhnGzuRVENzTm3Oy9oh5KCtgtHC2cAoDLxLF___4wS5bJH11wmiqcX8c1kCW5fXCaFmBRM; path=/; expires=Mon, 13-Oct-25 14:44:48 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98df72086f0623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":83,"dns":21,"connect":1,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BuB7Ymj8.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:45.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/BuB7Ymj8.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"BuB7Ymj8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"651a722888000b18e103a2d0b048d92d\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4ltw-1760364885892-791cee4a4772\r\ncontent-length: 6358\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15065,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8257)","md5":"87a34fedac4ccf3dbcf93842f87186ff","sha1":"056d145e59ab9649359809ba766c7f412c57a1af","sha256":"b6aae5e963ea019ac4942b545f80d716570945d10c78749e6c35509c52d57c1d","sha512":"6777a269bddbf3a8debd6ba71fcf94250cb722f8432f0db5b1222b1548057afd0a8f16d7bd9289400d159ed4bfdad956572f6b23fac97613e8e9166380d121cf","ssdeep":"384:Ah0iC7spo6YnDz3fzXWmUHGcm9lsEJb/nFkXvBBF1k:AhE7spWDzzmmUmcm9lsEJb9kfBBF1k","tlshash":"ab6284e83285b17653aa05b650bf0106f2742480780b84a5e1adbcdf3d7259a56fbfbc","first_seen":"2025-10-13T14:15:12.87316Z","last_seen":"2025-10-13T14:15:12.87316Z","times_seen":1,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BE1ViCNk.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/BE1ViCNk.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/2.CCx-5SZP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342791\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"BE1ViCNk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"c091ba79a9a26fc28119ad02dd72c05f\"\r\nlast-modified: Thu, 09 Oct 2025 15:01:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fssdf-1760364886697-3ddb7bbbd1f9\r\ncontent-length: 3287\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8368,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (8367)","md5":"3a4602833b423005ae377b3bd6c24a38","sha1":"8624656b014c5838552d8e7b5d9689e721fad418","sha256":"37f6e40a04a8a4022c2379d6626fe586ff5bf83a8da4a9b0fb5012f2b83e0287","sha512":"10d9bdf9440ca3c834bb99a2a2a707e238c1945732e69f6cbd9eda1080eda4e59f01856e21570fe6bfcf3b9ba37cba992cbddfc5aa307abc5a6ecc13c1ba652b","ssdeep":"192:qu6Z27gwH59BQ3sUqVivZZghZaUGQjv4sS8TpJofqhsKvowl:qzZR859BGqeZuZcQjnpJrsK9","tlshash":"3402eafd7157e8bda06e80e6516f60007365259afc2a0dc4e3ecdd913d6a9d8203f81e","first_seen":"2025-10-13T14:15:12.874897Z","last_seen":"2025-10-13T14:15:12.874897Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/CgU5AtxT.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/CgU5AtxT.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/0.B64e-uZE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"CgU5AtxT.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"293cf07bb6b52a1a18d797328200c9c7\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fssdf-1760364886690-f4d35d8b7485\r\ncontent-length: 331\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (330)","md5":"293cf07bb6b52a1a18d797328200c9c7","sha1":"bf69950a40f5ba11475e896a5eb2f7b049370031","sha256":"8ac7e74d523881bb9ffb193d8897292cd05f78dfa91ecd285411d337361b1fb2","sha512":"996ab8246130832bbf9f7ed8bc24419e34e501df8d36a34fb16bf0269f90c593b3da05f0fa96fe2444a0345b32175b4781192ba0fd02a11f33cb2902c44e5a00","ssdeep":"","tlshash":"63e07df6ab81a0d5822e45c061d3a1bef30820743107fdd8114c99d7ae9f2e13735e1c","first_seen":"2023-08-29T13:04:58Z","last_seen":"2026-08-09T16:02:17.145439Z","times_seen":786,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Cronos_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Cronos_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Cronos_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"61d00fcf20857a3ae7e8be4bcc1843b3\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z8gpk-1760364888257-6e046593763c\r\ncontent-length: 4669\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"61d00fcf20857a3ae7e8be4bcc1843b3","sha1":"4b65a30cdb9f2f451288202087dec9838deab735","sha256":"ba8f243a310a3de1b4ac09e30c4777af4a10204f64e13b8af180a6706abe7677","sha512":"11aabfec31938156ffe4b4d335cef5be7c92cdfb30fb024baa675b4adf0b13dc0975f40354a2ed31677886b307271db80d667d7a62096311e5880f74268a5414","ssdeep":"96:brFequJHm43kNUKsvY5LVIdG8xeaJGWnDeWPyV+pMrzgfqycNuTRxSm:bJetHmuwUKgY5LmsHqnDeWYBrzlNuR8m","tlshash":"e6a19e8cec155e18c3ff4310590a68d4bab1fb5b7d2b70e24531f490ba18864adb63a1","first_seen":"2025-10-13T14:15:12.877541Z","last_seen":"2025-10-13T14:15:12.877541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imweykdbnoiuemaelnnb.supabase.co/rest/v1/z_tokens_price?select=tiker%2Cprice","fqdn":"imweykdbnoiuemaelnnb.supabase.co","domain":"imweykdbnoiuemaelnnb.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"OPTIONS /rest/v1/z_tokens_price?select=tiker%2Cprice HTTP/1.1\r\nHost: imweykdbnoiuemaelnnb.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-project-ref: imweykdbnoiuemaelnnb\r\nsb-request-id: 0199ddec-8153-7fc6-9421-dfe250df1fb4\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=LokEWN0CpmlAENfxZtjbkkyKjJtRCG6Kv6KIJKWAcME-1760364888-1.0.1.1-96PXb6pXUf4.9rQM__YCdYp7pG4wBCVCCDO5Jm7IZLSrFWFtolsTqJrYxFMYsRqbmgJztRQ9vVSuxX0GIktFYjTPbpB0ftI48lWXlQgFrXE; path=/; expires=Mon, 13-Oct-25 14:44:48 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98df72087f1823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":91,"dns":20,"connect":1,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/assets/0.C48TZFLl.css","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/assets/0.C48TZFLl.css HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"0.C48TZFLl.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"c86fbb60f21924271e3dfe1427b20bd1\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hz75q-1760364886468-23411e7c7320\r\ncontent-length: 262\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":262,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c86fbb60f21924271e3dfe1427b20bd1","sha1":"a8a5e920a75bb4410c113acb85d292a069fa1843","sha256":"2705a5c4fde7ec3e6c7ae5a131d73800620bdd0516f60b670e46b5c31de5a488","sha512":"a8e2d4831f56484b22fae033dfbdd295b23444567eab60d1b09c0840b3884b2ac8facd0ad2b4144816b584232a00119ee72a6f3cdd9ef87298c59b781902a912","ssdeep":"","tlshash":"f5d01706f4cb0a1a302b146a10a1f3b9693e54c1a6081f79f01b73fc43400ea6693226","first_seen":"2025-07-14T15:25:07.954022Z","last_seen":"2025-10-13T14:15:12.879227Z","times_seen":4,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/2.CCx-5SZP.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/nodes/2.CCx-5SZP.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"2.CCx-5SZP.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"525a6e55cbd08188e42bec6a5ef03dc7\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7mwm4-1760364886487-48098c9ec334\r\ncontent-length: 21225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61282,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (61281)","md5":"0a0eede958d1d884cf412ef662cb8b88","sha1":"b1cee181a69f7df504bf4924e4548b2731bdb8a5","sha256":"92d5b453bba000a5640bb220d2b0bb8f142f3c2869ad7a2d8dac8834e8320790","sha512":"231779801c88b0b0258150061e48249ede6de629702204aa0922f46d47772ea0464d35748d9efcd0535653c21c5b1b0462c538c3db8116a1950d81fa8ec4bc91","ssdeep":"1536:ohKEKmt+Mv5c+nPs/zNofbJbeGusApLDvTbaZ:ohKEdt9v5c+nVflQsy+","tlshash":"09533c9d335af47e526f8eeaa07f100073140b99f20e4801f1bdded23da5a4a176796e","first_seen":"2025-10-13T14:15:12.879886Z","last_seen":"2025-10-13T14:15:12.879886Z","times_seen":1,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-QM237H0Y3N\u0026gtm=45je5a80v9172075647za200zd9172075647\u0026_p=1760364887092\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1677084273.1760364887\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1760364887\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.wallettools.org%2Fasset-recovery\u0026dt=WalletTools%20-%20Recover%20Your%20Crypto%20Balance%20Easily\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=3526","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-QM237H0Y3N\u0026gtm=45je5a80v9172075647za200zd9172075647\u0026_p=1760364887092\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1677084273.1760364887\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1760364887\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.wallettools.org%2Fasset-recovery\u0026dt=WalletTools%20-%20Recover%20Your%20Crypto%20Balance%20Easily\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=3526 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://www.wallettools.org\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:102:0\r\nreport-to: {\"group\":\"ascnsrsggc:102:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:102:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":33,"dns":0,"connect":7,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.etherscan.io/v2/api?module=account\u0026action=tokenbalance\u0026contractaddress=undefined\u0026address=undefined\u0026chainid=\u0026tag=latest\u0026apikey=GBS8HW6N7NJGQUQXQNDEBGJF883SGPCBKR","fqdn":"api.etherscan.io","domain":"etherscan.io","tld":"io"},"ip":{"addr":"162.252.84.9","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.etherscan.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:94:5F:BD:86:ED:59:16:05:E9:02:5A:F7:09:88:4C:05:36:F6:0F","sha256":"A0:69:F8:50:5E:0E:19:0B:88:A5:98:68:32:BE:E9:57:4E:BD:EE:14:05:61:B3:1E:70:32:B2:6C:56:78:17:4E"}}},"request":{"raw":"GET /v2/api?module=account\u0026action=tokenbalance\u0026contractaddress=undefined\u0026address=undefined\u0026chainid=\u0026tag=latest\u0026apikey=GBS8HW6N7NJGQUQXQNDEBGJF883SGPCBKR HTTP/1.1\r\nHost: api.etherscan.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 260\r\ncache-control: private\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nsvid: 6\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nx-nginx-id: 3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eaed05334fd857f8360e6ca19c4dc98a","sha1":"51121a53126bc066ee0c022d3cdddd3056bc1539","sha256":"5c87c4cd892fb31b1d29a53df956e9fbd3a415bb94a725873b494fea0e6c6ac3","sha512":"df2e6b32a413f329db69e091fbb927ce07cdaaa4672796e15f6c44ba2b3e7261c276964263d4fa630796c52decf088147fc29d1d44a4ae19c3bdac3744dba91e","ssdeep":"","tlshash":"27c022d3161f222a230245c7305420829a8bc130a387a0684c8d167e584bd1af9bb904","first_seen":"2025-10-13T14:15:12.882089Z","last_seen":"2025-10-13T14:15:12.882089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":408,"dns":33,"connect":122,"send":0,"wait":123,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Mantle_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Mantle_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Mantle_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"e764259209248706ff7c75e102fdcedb\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h9cwr-1760364888265-22ac5467b667\r\ncontent-length: 1346\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit grayscale, non-interlaced","md5":"e764259209248706ff7c75e102fdcedb","sha1":"17d30679a8d8a78db44df437124baa45682fae8e","sha256":"a2b7cdf91d7d573d80cea4b0ce5062830e206f69cee6901aad9b0764a2d4ceec","sha512":"4072271ca5955aefb5173810dc6182c2685855647af1f8c65bb42a05626b9b4df8d7c263311af845b245e3dc655b7572a60f0f728b4a7daec87136e55c142467","ssdeep":"","tlshash":"0e2108ebc932359092f13334d91e331495648b1b2285d784384b6f755024dccbc5358a","first_seen":"2025-10-13T14:15:12.883693Z","last_seen":"2025-10-13T14:15:12.883693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@latest/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:44.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/web3@latest/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.16.0\r\nx-jsd-version-type: version\r\netag: W/\"9cd7c-M9qpM1YeVfmYjiviVEgHj5fvDbI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 27248\r\ndate: Mon, 13 Oct 2025 14:14:44 GMT\r\nx-served-by: cache-fra-etou8220086-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 160003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":642428,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"ce5bd54ade787e3757d0d32ff267280a","sha1":"33daa933561e55f9988e2be25448078f97ef0db2","sha256":"f03340295d792adb763c777eaa96039aa831c2402bd7cbc970db44931fa736b8","sha512":"11ca21748cd36a3ee4bcfd3298cdd188ac5a9ef7f01af8ecae6a2e15139e2dbb485cd5e04010d479eeb0adfecbe1b8304a25c66512e2d8094390e4385ab08a62","ssdeep":"6144:iNajiG1YOdqCibdPB8c118X1Unf9F9CvU9sT6Q479FwwQPvi6naRq3A7Hpa:ic+skHYW79FlDpa","tlshash":"98d44b847690f0a10bdb50e554b70002f334b965701d94a8b7b99cebbea9ecda137f39","first_seen":"2024-12-04T22:03:33.643534Z","last_seen":"2026-08-09T14:31:14.032964Z","times_seen":2219,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":94,"dns":33,"connect":26,"send":0,"wait":28,"receive":64,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/Bmb3m_9-.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/Bmb3m_9-.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342859\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"Bmb3m_9-.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"ab0e2929c1e1464399a89832ed97f946\"\r\nlast-modified: Thu, 09 Oct 2025 15:00:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76mw6-1760364886593-db33d6d50fdd\r\ncontent-length: 853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1789)","md5":"fc1f66da676ab86c112f33342032e08b","sha1":"5f6ac916e5c49eabade1d9d87c309660586ac720","sha256":"c3c9cb5ed7964614b436d8c8fc39630d4c16ae65b47a689bafaa7a968b2420b1","sha512":"93169171b2421e77a6ef2728c95fa46359422e3e684072478ef0ca9e4ce7cc72b57655a6285a07ecbdcd04b15d67d376d2c3027663511a9c26742f9bae38e3ed","ssdeep":"","tlshash":"4b316580fac17a6056e246e1c9bf3590c2285a50370fd9f0e4fa45617d376aceb39e9c","first_seen":"2025-10-13T14:15:12.885942Z","last_seen":"2025-10-13T14:15:12.885942Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/3VE97lel.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/3VE97lel.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342791\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"3VE97lel.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"6e588f4f37ad28431155a92e79b4f8af\"\r\nlast-modified: Thu, 09 Oct 2025 15:01:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9q5x2-1760364886601-d7644565a2cd\r\ncontent-length: 458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (457)","md5":"6e588f4f37ad28431155a92e79b4f8af","sha1":"b5c5b9d6a9748e9ac04fa5884839fd9c25613d36","sha256":"e776554a9b4dd0564f668e2c06bd79ba016b124cde939e1eeb84f69486dcde79","sha512":"410731da841f5756ce93ecb366448e1063e6f45a124f8aefdfea72a60d92480a64dc4b81b42b47bbb00625be5875eeaec96a3dd5a37771f5b26f3b5c120da067","ssdeep":"","tlshash":"4df0a3ac30c0a4b49056a8de7e77941363501150ed7ccda0d6dd61d189918f5e787e3e","first_seen":"2025-10-13T14:15:12.887576Z","last_seen":"2025-10-13T14:15:12.887576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/help.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /help.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"help.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"1c0e2980128cc9b21a47bce80e9a66e5\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ds94q-1760364888222-56215442a60b\r\ncontent-length: 1317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c0e2980128cc9b21a47bce80e9a66e5","sha1":"93d4e78d6b7913a8e34b43280fe5654885f64189","sha256":"309261c1f0136798c7b9981a5a4788117843538cd8273cdbfea688e8a83ccadd","sha512":"9da70b7e108d6a0be24e761a0910861115b2a43d81082c6c5eb0b59af03743915eb0a31cdb4dff9bad8df278ade2271009743f116a57364dfc8e37bfbea64d52","ssdeep":"","tlshash":"3651dfa587318778c6e41fc49ff9bbc1abd29c3e363d87c48462e121b4f5ea24516c89","first_seen":"2025-07-14T15:25:07.969466Z","last_seen":"2025-10-13T14:15:12.889087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipgeolocation.io/ipgeo?apiKey=a526315192aa476dbe647667b54542e4","fqdn":"api.ipgeolocation.io","domain":"ipgeolocation.io","tld":"io"},"ip":{"addr":"116.202.166.112","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:49.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipgeolocation.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 01:58:53 GMT","end":"Tue, 18 Nov 2025 01:58:52 GMT"},"fingerprint":{"sha1":"34:75:C1:6D:31:67:DE:94:78:FF:16:87:24:C1:B1:F5:83:4D:CF:1B","sha256":"C3:1F:EB:AD:69:B9:39:4B:2A:F3:52:DD:9F:35:11:4E:B6:FA:83:3A:3F:94:5F:89:BA:C0:B5:34:EC:C9:74:6A"}}},"request":{"raw":"GET /ipgeo?apiKey=a526315192aa476dbe647667b54542e4 HTTP/1.1\r\nHost: api.ipgeolocation.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 13 Oct 2025 14:14:49 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.wallettools.org\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1477,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a2bfae2795236e4c120b0cd1e3fd198","sha1":"8c44784833f382cab16854b553cf0543d1a00217","sha256":"d8c2e2c4ae518a8166660edf72d1a3df3387e1aec9ceb30c21a88021cca649fa","sha512":"7c58511fa9d83926cf290758d52b1c2e083ac53d4f6f6bd880fefef28ac6df274a0a08abaa20fe102fd2989bdb246ab42907152cfdf81e70fa32fd0641df55e4","ssdeep":"","tlshash":"1531f22c4169ed6e9cf702c0711d7b6f653d524382854e42afadef4cc1443ada105349","first_seen":"2025-10-13T14:15:12.889898Z","last_seen":"2025-10-13T14:15:12.889898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":79,"dns":22,"connect":24,"send":0,"wait":25,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/B7gcrP4j.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/B7gcrP4j.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"B7gcrP4j.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"8a46b23e63e33ecd768340a5fbeb4fc1\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cs9kp-1760364886590-b67b54a31c68\r\ncontent-length: 907\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":907,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (906)","md5":"8a46b23e63e33ecd768340a5fbeb4fc1","sha1":"b4a247c2bf624d86e06c88b38c6e18b7debdf7f6","sha256":"a33f4483d1018b1eeda665456ef6342be0e8a6937630f2983bc0ebcd16e90837","sha512":"3924285b733334b5a569fb969822b810b9d272cd98437e1da00c5af658ba4862424357f907db8bddbddd5f1847020f80805521281b5e923ef75c7b6c7b754d28","ssdeep":"","tlshash":"321123e83250a462679f28dd80bb505361502612b53a3ae071787fc72b241fbcbd2d56","first_seen":"2025-10-13T14:15:12.891862Z","last_seen":"2025-10-13T14:15:12.891862Z","times_seen":1,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/asset-recovery","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T14:14:43.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /asset-recovery HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"asset-recovery\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:44 GMT\r\netag: \"4c234097a38b44f3304a72da0bd9c097\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76mw6-1760364884036-879b305bfba2\r\ncontent-length: 595\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"4c234097a38b44f3304a72da0bd9c097","sha1":"ff4a4efcef4aaecfc63012e59b818774013bcdca","sha256":"2f72e2e5ab31aea649023b3dab3137f61d5b3d9f9a38d6d34b6388c07753e59e","sha512":"b45fea8d711a0a3f06ddbe9ae9436ee37588e379bec863e950729dc62ca616157b8789f1cf18964097e155a83c0e0a4ce56348b4d62925a257493b81bb3c9ae9","ssdeep":"","tlshash":"6521d0864999ad07e50ade6ea0d2f35c4b97d0bfac444cf6b88c61a70fc1fb0424e901","first_seen":"2025-10-13T14:15:12.893747Z","last_seen":"2025-10-13T14:15:12.893747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":65,"dns":39,"connect":1,"send":0,"wait":11,"receive":435,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/icon_plan.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /icon_plan.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon_plan.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"3a113d0099ebad363f22aaf0fc0459fb\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vmmgs-1760364888224-4245e02b0806\r\ncontent-length: 1727\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a113d0099ebad363f22aaf0fc0459fb","sha1":"b10eaccfb6f9480f34dabfc54a5e912924d06e94","sha256":"0faf49843c1a2e94ab0307583338a715fbc7e9569c9920355e35698492d650f8","sha512":"9a8c27bfc141eff29dd60c9b1e4c2f1b85d7530eff60484e49cf247aaaa2841a8bb1c6755ee7f5b96ed6353c8184ed8da29e6c1b042cdd434bf4c01318695827","ssdeep":"","tlshash":"5d61318d87e9d118eace11a48ee70ec12b15d85a35a9e3cc5ed6fc30d472df1a079a14","first_seen":"2025-07-14T15:25:07.936554Z","last_seen":"2025-10-13T14:15:12.896175Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imweykdbnoiuemaelnnb.supabase.co/rest/v1/evm_users?select=*\u0026user_wallet=eq.","fqdn":"imweykdbnoiuemaelnnb.supabase.co","domain":"imweykdbnoiuemaelnnb.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"GET /rest/v1/evm_users?select=*\u0026user_wallet=eq. HTTP/1.1\r\nHost: imweykdbnoiuemaelnnb.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\naccept-profile: public\r\napikey: sb_publishable_3obTunfmXb4ox5KwFFUFFQ_tdSDQshJ\r\nauthorization: Bearer sb_publishable_3obTunfmXb4ox5KwFFUFFQ_tdSDQshJ\r\nx-client-info: supabase-js-web/2.57.4\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-range: */*\r\ncf-ray: 98df7208d80c23eb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://www.wallettools.org\r\ncontent-encoding: gzip\r\ncontent-location: /evm_users?select=%2A\u0026user_wallet=eq.\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: imweykdbnoiuemaelnnb\r\nsb-request-id: 0199ddec-8191-7c67-9b8a-3065ac607247\r\nx-content-type-options: nosniff\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 4\r\nset-cookie: __cf_bm=D9ljxqirOQhXCvcUBFSj8_FXpu14PApdBSvMpx1PUcY-1760364888-1.0.1.1-ufBguK7H7q8x913CakLRFWplqY5.L8a9jN9euSyCJ.Ybg8baS8XBJfORwy1G9U.Sc_gX4fbQOh9KBi3zvcD71RGpV350qNzeKcttDB728pw; path=/; expires=Mon, 13-Oct-25 14:44:48 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-11T10:51:24.434276Z","times_seen":315901,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/YsaGhsSS.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/YsaGhsSS.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342791\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"YsaGhsSS.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"f7a979fb6177c65149275f4b7e34dec9\"\r\nlast-modified: Thu, 09 Oct 2025 15:01:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vmmgs-1760364886603-2eea697421f2\r\ncontent-length: 394568\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1350931,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8ff3c3299dab9babc2e1c1dced67f9fa","sha1":"90ea8a2da3a91ab755a819f666fb8615b48393a9","sha256":"26e71db25bf834bbed2cc566e7133f390438cde00aed81ee8281029199e09348","sha512":"7f376a62d23828f4d76ae1bb262827958798280e4b3470bd1a0bec0ca25ccab448575379163c6ca06422905a944a48acf91642d0a757a251b77b20d819c343f9","ssdeep":"12288:SuqiwkIBdqcKWl8G9qvWAhzmEamsj13zXXFzmm:dYkIOcKWl8G9qvWAhzLQ137XFzmm","tlshash":"8125f7d472917491c2a66e90406fc00be37efca46c8c5169bb1becf72cf4a45552af3a","first_seen":"2025-10-13T14:15:12.898999Z","last_seen":"2025-10-13T14:15:12.898999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/gZGBu8Hc.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/gZGBu8Hc.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/1.vVQ5Nf8m.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 342859\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"gZGBu8Hc.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"b17839c6ca7d355e221563b004720be8\"\r\nlast-modified: Thu, 09 Oct 2025 15:00:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fssdf-1760364886681-eba323c7f55b\r\ncontent-length: 28751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89114,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49277), with no line terminators","md5":"2f0b5ab8d70cf615dd2622ed4dfd2d39","sha1":"2a33567d13666984c117124f6a1474a4db12490c","sha256":"ae551ade8f828d3ff4df020bdad312ca6cb72fa54b39d40e40912efe28f3c5a1","sha512":"4acdc8bf050719613ba9c24ae6ba65b860f92d55ee5bad8813b0b2ce88e1fbd37acd5c2439517a19ac6ec352b0c59eddf432a11f9ee87bdc6538dbf6cda5d0db","ssdeep":"1536:jceocQLXf45MODUifXGYtIq7kWbdc5dRaH2r6o7Gcg7SP8PD+j53T+FMtEWtJ:gp3LvGMUUifWYGq7kSdcxn37G8Pm+5Dn","tlshash":"90933a2e179cb03715c169afeb08b73a81068cbadbcee5e14c95429b23ecd7d41079b5","first_seen":"2025-10-13T14:15:12.902341Z","last_seen":"2025-10-13T14:15:12.902341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/arb_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /arb_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"arb_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"c03a722de6667aff1be332ceedcbffdf\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tq5lv-1760364888247-bc5858af49ac\r\ncontent-length: 23627\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"c03a722de6667aff1be332ceedcbffdf","sha1":"02d659d772c2ca5edb5fc249bc90feff35f98a30","sha256":"0c63dfd25a64014ebec410cf252d695bced762a660a5985913480ec4f032a7e9","sha512":"a32751187a433b2c36dc617299447944ae6ac926bbb3477b42676b16f33210c7ee094a55caa974a53524dbfa9eaf015da6147f1e98ad5057b55f57e3bc4fb679","ssdeep":"384:hygHTpu7wCgUaF+ZHv9aeyL2zcGvL/4FJNqPKZ/4QoHccnyqHcTf3j:h/Ib1Z7zcGvLSIPSArnyqHcH","tlshash":"3cb2e059ff341a6d84cd9e17b62bc2f1dc1d328c8d134067adea8e959423db4aca2d90","first_seen":"2025-07-14T15:25:07.955841Z","last_seen":"2025-10-13T14:15:12.904934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/nodes/0.B64e-uZE.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/nodes/0.B64e-uZE.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/entry/app.CnULT7o0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"0.B64e-uZE.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"edc9de7a2c64340df4b490bb04937eee\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q2stx-1760364886485-69f3b3f0a1fb\r\ncontent-length: 12585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32309,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22631)","md5":"ad49a5c629442cd4b4aeec61387d0c4a","sha1":"8e6446ee3c8c46ea9debfbbd618ccc028eb33100","sha256":"2acdd7a7c8b94e3468871d3c0a9435881f7213d7de79907036363fc7c39d5ea1","sha512":"e2e73a2e22f5abd788082501463db932173768f6e1a2688bf06cae77fefcc390d049dd1d4cac8e7803dbcf52663f572fcf86ad559677beffd688e0e394ed6cb9","ssdeep":"768:mvc0Yp02TnC+Mg1djzgs3lG4wB+5pgggX4b3EcyC+wY6/u88pDqfTrXRo:b06NmIxggMi79H/8dn","tlshash":"19e24c98711d74fe633b88a9207f5000b3a8b657f41d4944e5eecca53bcaa8903e795f","first_seen":"2025-10-13T14:15:12.907602Z","last_seen":"2025-10-13T14:15:12.907602Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/chunks/BQZ9KYES.js","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/chunks/BQZ9KYES.js HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/_app/immutable/nodes/4.CzOlM9qN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"BQZ9KYES.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"e4d2d75c9c43347c1d6ecf8ec6bed45e\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f2l7r-1760364886595-7688c1ca94da\r\ncontent-length: 2151\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3213)","md5":"b6c59ff6ba0705253bf27cf10a55f91d","sha1":"f4f5f3d84b2e98cf150019dff5e7d4a9a7b10fa9","sha256":"dd9d1e75dc2c3a4c898fb6b5450c315822d525dfa47733377f06503d028c3dc6","sha512":"7d81a9216bb140fbdebf1418d605ef91f574affe06102221e5dda30bf0545a6a25f734ee3f2a23a1143a05700e1963f6ccd7f1e6de3712d6621f612a59ce5aee","ssdeep":"96:xoQbhL4ZPZG02XYTGgVzDo96DKGBcL/o4RZHke8zruR+Zvs:xulNNDzDKYC4zyR+O","tlshash":"f99172ad61c0e3f402d95bd816ebaa04467ec55471c788c9ed8f45e43ff90ea4e63a0d","first_seen":"2025-10-13T14:15:12.910054Z","last_seen":"2025-10-13T14:15:12.910054Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/eth_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /eth_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"eth_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"de4be35bf23c1da8f3c298c1036ad8a3\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9q5x2-1760364888243-ab82703c8ee1\r\ncontent-length: 17944\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"de4be35bf23c1da8f3c298c1036ad8a3","sha1":"bb84a3b2d186487fa875d732cbdef615f919774a","sha256":"b8b5d54552cfead3b0c1e63c7c355f315697b57429dd0629a24ae59ddabbe98b","sha512":"24522fdb911d1b3927e85a0a10e2f41bf322d0fed2fb9e5c2e448514ab88767ca1a2390c3616b6320394d6426b73313959c01eb31c6c6b4a1484b8db9fd49c08","ssdeep":"384:hygHTpuUcgkhyuWN7yMvbWGLRuR2/FnOyaAtDip4:h/0g3hviGLRY6Hmp4","tlshash":"fa82d1403687727da56304a6e5abe711ec816088c77c2150975ab2ed8cdff908de6c5a","first_seen":"2025-07-14T15:25:07.992323Z","last_seen":"2025-10-13T14:15:12.912213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/Unichain_logo.png","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /Unichain_logo.png HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Unichain_logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"392d792620be008f2ea8bfc0d839ee16\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k2m9w-1760364888258-e648a11d1478\r\ncontent-length: 3164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"392d792620be008f2ea8bfc0d839ee16","sha1":"6960a866678c67701d10942162330f5e9ba6e1ec","sha256":"19aeaf856871d0741b9835416bd4c92ab95d9f9037c689231baeb82f5ea56ab7","sha512":"8e6deaa8cc615b2db03a8c8a4a5da0c91eb262f697c6db4acc5f40bc23af742921127f78ac8260bc72b640aadf7426d97888ec16eb55ca4b4a1379db76710e9e","ssdeep":"","tlshash":"78513bc4f07a555126110627953a4a48d4aded2f0f07d9ca4eedf7680b1cfacddba180","first_seen":"2025-10-13T14:15:12.913315Z","last_seen":"2025-10-13T14:15:12.913315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/_app/immutable/assets/4.D_v5w7wm.css","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:46.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /_app/immutable/assets/4.D_v5w7wm.css HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, immutable, max-age=31536000\r\ncontent-disposition: inline; filename=\"4.D_v5w7wm.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 13 Oct 2025 14:14:46 GMT\r\netag: \"8cefef2523f6761d5f71f2917c889dbb\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::98w5p-1760364886480-39bccbdb0bca\r\ncontent-length: 459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (458)","md5":"8cefef2523f6761d5f71f2917c889dbb","sha1":"69c86ced4b8db065cf7dcc9798b480d6ce9698dd","sha256":"e71b5df708fed8ce82b985953781af48d906aa36606821f2e83fd7de7918f586","sha512":"3667a7f20648a66e5e77efd93d73cdeaa1096a746afa694633092c4f1ff3c2f139e3c6a8e0d262d8766f761db85f4250e3e4c202f49c7980cfa0075b9aa21886","ssdeep":"","tlshash":"dcf0272db52b027b219acfe43046f690501756d958bd13ece3b02c288992abf4733f5d","first_seen":"2025-10-13T14:15:12.916041Z","last_seen":"2025-10-13T14:15:12.916041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=tether,usd-coin,dai,weth,polygon,wbnb,binance-usd,arbitrum,wrapped-bitcoin,optimism,avalanche-2\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:47.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 16:28:35 GMT","end":"Wed, 10 Dec 2025 16:58:50 GMT"},"fingerprint":{"sha1":"CB:DD:AB:58:CC:53:EE:A8:1B:A9:21:9C:35:0F:22:29:C0:FE:6B:FD","sha256":"62:E3:E4:A4:6A:BD:9E:09:EF:78:C2:63:F0:7E:CD:E6:51:23:C9:86:35:51:95:86:EB:58:66:2B:F7:65:53:1D"}}},"request":{"raw":"GET /api/v3/simple/price?ids=tether,usd-coin,dai,weth,polygon,wbnb,binance-usd,arbitrum,wrapped-bitcoin,optimism,avalanche-2\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wallettools.org/\r\nOrigin: https://www.wallettools.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 14:14:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"adfc0b3d4160fd9dd3e460f4f7d01dff\"\r\nx-request-id: 97614ca0-570b-476c-aa57-b2c7ba5efd4b\r\nx-runtime: 0.007829\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 98df72009db0b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":269,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8f13fa1528aac5376b6e00e71b8a8f7a","sha1":"0d0d5d90f07edbc9880a0c2b09fca5cef946ed33","sha256":"5e786d91232bd8b62b76e397599db10c15ca4b0605f3d9cedfbad34163a7aa30","sha512":"3609be994ff3cb95ffaf15f2ec38af75fa724cc294902096dfa2367992843fc9599345214a896f8dea6123c12390de138472c6a40661e8341a99aa83f78f6f78","ssdeep":"","tlshash":"dad02ee483b10dbb0b2468b8cc2a33e0e813d478d8ad0321604dec814dae2df61002e8","first_seen":"2025-10-13T14:15:12.785974Z","last_seen":"2025-10-13T14:15:12.785974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":58,"dns":33,"connect":1,"send":0,"wait":180,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallettools.org/big_logo.svg","fqdn":"www.wallettools.org","domain":"wallettools.org","tld":"org"},"ip":{"addr":"76.76.21.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallettools.org/asset-recovery","date":"2025-10-13T14:14:48.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallettools.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 21:14:55 GMT","end":"Tue, 16 Dec 2025 21:14:54 GMT"},"fingerprint":{"sha1":"4F:B3:45:94:A4:DF:81:F5:F1:3A:1D:25:F3:C1:13:DD:C8:93:C5:50","sha256":"3C:EB:96:5F:39:03:EA:C3:87:3A:60:44:85:CF:F4:1C:E6:12:3A:4C:08:9F:AC:6C:5C:35:7C:9A:BC:DF:A0:3F"}}},"request":{"raw":"GET /big_logo.svg HTTP/1.1\r\nHost: www.wallettools.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallettools.org/asset-recovery\r\nCookie: _ga_QM237H0Y3N=GS2.1.s1760364887$o1$g0$t1760364887$j60$l0$h0; _ga=GA1.1.1677084273.1760364887\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"big_logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Oct 2025 14:14:48 GMT\r\netag: \"9c34fc3276860f12f39a8dc809841add\"\r\nlast-modified: Mon, 13 Oct 2025 14:14:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7mwm4-1760364888233-5bedb19b5f8b\r\ncontent-length: 3545\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10160,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c34fc3276860f12f39a8dc809841add","sha1":"5b0eeaf466671de540eb0e9fe5122c4cb2a777b5","sha256":"2bc12eb90285cbe22e402f6766a145aa162d61f3ee2341ce0fabf5373ccdbec8","sha512":"fa8b3f5b0d09bb4e63866d320f0d9373d6935ea54a7b6c7613cf7d0610c1879784dd74e17ad0c5b640825e33571c25d2d5a862c5d61aecb17a90c8f1f799889a","ssdeep":"192:cj2w6j/r6UPz1Vd3RDcLJcLnuH+zS86ySGv7L6ee3w0r:ci/SIcOzuH+oIL2N","tlshash":"5022378b8bddc1862e8e2358ca571fd31b41e88b7594e1dd27edfc10d873da16a58b40","first_seen":"2025-07-14T15:25:07.931813Z","last_seen":"2025-10-13T14:15:12.918168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"www.wallettools.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"www.wallettools.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}