{"report_id":"105c04a4-c8df-4465-b0fe-3388ca49f981","version":6,"status":"done","tags":[],"date":"2026-03-06T10:00:58Z","url":{"schema":"http","addr":"scanmywallet.click","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"172.67.166.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"scanmywallet.click/","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"title":"Check USDT Wallet Risk \u0026 Crypto Cleanliness | ScanMyWallet","dom":{"size":24934,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (406)","md5":"3a02de3f2d5a6b78f7f6672f4daaea00","sha1":"fc357562c2709725614421291829b0a15d688027","sha256":"fb01ef7f12a71518bab5fb89b58f8fc392422c9265a73eb944a2733d68b79563","sha512":"fcfbcc688fc9a56eb8032d3b4a41be1596561d413353459f824f54b8b6731da5412bf05054587e1d11bd956b76f91924643b10cf0ab4e9620284788eef065f29","ssdeep":"384:Bw4QYTr/lTQ4ZQBwx59VSOGMvOSZYnylYyFA6PFsQSM/hBoeH:B9VSO7mtn+YyFAQFsNM/8C","tlshash":"1ab28336e9e43437816a82d169b227fb7aaa8003c75d210573fc45a48fcbd9adc13e5d","dom_hash":"domhash28b032094ac0a992bf9d87a2457fbc07","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"scanmywallet.click","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"172.67.166.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T10:00:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":135168,"sent_data":2243,"comment":"","tags":null,"fingerprints":null},{"fqdn":"scanmywallet.click","ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-06T10:00:58.385609Z","last_seen":"2026-03-06T10:00:58.385609Z","alert_count":8,"request_count":8,"received_data":129371,"sent_data":3635,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"botbotbot.cyou","ip":{"addr":"104.21.31.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-03-05T07:38:10.944293Z","last_seen":"2026-03-05T07:38:10.944293Z","alert_count":0,"request_count":2,"received_data":1278,"sent_data":1067,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":6027,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"scanmywallet.click/admin/assets/tracker.js","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00690d613a8c3f90409b8e00a7120ebc","sha1":"b4f47b432e68a8d443809ef99953de13e302fa9e","sha256":"d5284073bafcc87595b8d3dc2c26d29356d4fa72f27b70c7f7d7d90c7d9504be","sha512":"04ba264f2663a20c2b56ab7e816b8b1418a36148a6660c66ce79377c33e246ba96bf922f55fc13deb71789e74c80d18a67aa0cab9322e474b40cc80e0f53ebe7","ssdeep":"","tlshash":"53510b9e6cf760b19a63b03e133fa5143027a0572d86ec61bf4c16205f59a3c51f6acd","size":3040,"data":"","first_seen":"2026-03-06T10:01:01.588916Z","last_seen":"2026-03-06T10:51:35.936915Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentserif/v5/jizBRFtNs2ka5fXjeivQ4LroWlx-6zUTjg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/instrumentserif/v5/jizBRFtNs2ka5fXjeivQ4LroWlx-6zUTjg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://scanmywallet.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21032\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 21:06:37 GMT\r\nexpires: Sat, 27 Feb 2027 21:06:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 564837\r\nlast-modified: Thu, 04 Sep 2025 17:18:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21032, version 1.0","md5":"9b8dd1ecf641700bf1caa9d17da6374e","sha1":"37ddf465bbcc252776a37dcf28179a3ca590363b","sha256":"5eb09b5ac0e28b67c2f041c8ba6d244604ca0c0980d65912ab2d47fed84ddc31","sha512":"0a484806c5b11d6a596400cb3307d0978a0a01f2c4c1b332a67d684441702e50bcb7783fd06d8c8a0a0cd8783bf09e0533e7db4dab56d03ed817c9d3ae688f7b","ssdeep":"384:aFW82hME4ypFQ+46L5ZZStJ2c4A7n+ZxOfNwHRn5YWUjlgQEN:adc62g+PWNI8jlPEN","tlshash":"5692e199a1d853b292c92a3a8ec37f19e43453ef6125fd9c59ab76c08de405bc9c2508","first_seen":"2025-09-11T04:20:12.875491Z","last_seen":"2026-06-13T23:17:07.868967Z","times_seen":2280,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":77,"dns":1,"connect":14,"send":0,"wait":15,"receive":7,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/images/scanmywallet-scan.webp","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"GET /images/scanmywallet-scan.webp HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25428\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 16:34:12 GMT\r\netag: \"69a85f04-6354\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xr%2BLMsBBc6DvAOoVbq4woVI8rjDagTd73SSRAoxpIZxdc3GNf5D9xnj5uhNJqjtO4yrq1Q4%2B5T7%2B8f3e5XtVwFN7eR4RUac3%2BtL8r7K%2FJa%2FIPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8083a0d85daa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 923x746, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41c64f9427805360b99a246232342a55","sha1":"4debed0acbf7f6e0d3b54856e671272e1550ec08","sha256":"891901a9e2e51ebf14fa9ef7cd477303bfa930aa2b5e608bc9152885dd8a2e40","sha512":"6b4444b788fe8536cf4a1064a7720363d091dfe72f91e5349ebb2879fe9d51bd7cfd7bc1f762dc3569f149246668d35707ab1aad2d2cfb5672cafc867844687e","ssdeep":"384:BEyzonvUFYdUTzf/KxxyGefLAvhhlNbmwe0AzXV6VBhntG+UgB7vgSM6V:BEyzonvUFYsH0Zefcvr1aF6XhnJnJ5","tlshash":"34b2f10566d21b090c68721d0dfc5975e0b9925fe6f1c0fa58b88993f262b94fd770e2","first_seen":"2026-03-06T10:01:01.580473Z","last_seen":"2026-03-06T10:51:35.945553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/images/amlbot.webp","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"GET /images/amlbot.webp HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9236\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 16:34:08 GMT\r\netag: \"69a85f00-2414\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doxovWpquvwlbTWk%2FlNcWQkm2g77pVpnq57N8Ng2r1N2oceviWT4MFZrXEZ5iganOWK0pWlAxcuOcCu%2BGSHn2aDZ7soSKFY%2B5ifj5EIcMwHiUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8083a0d85eaa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x630, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0a9005c2a6d27633f22a5e1eb4861e6c","sha1":"df7f742db062b169e8f74ceaf81e7427cb6e21b4","sha256":"f349115643d2d3190bc6052dfe9859d7057d2220d436b66fb6beda1848e8a679","sha512":"438bc6735c0220931efd05f211f2a87a0bbbc75f31852986f55b012114e7203cb2b939dbcfb23d5300fec410a11d3e67c2a8cbdc5a19e5a2c97ab1dcaedfaa70","ssdeep":"192:221O4+Nk8WKs8ubzbZm6kcqf6EfcFNvvKCSko:2L1sRucw6+6N33Sko","tlshash":"55125cb28a674d08f173467c14e894d6daf63cabdd53ad1c00576aace020abf29b041f","first_seen":"2026-03-06T10:01:01.581521Z","last_seen":"2026-03-06T10:51:35.919948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/favicon.svg","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:00:35 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqdwOoQzuM%2BH9batFa2aHszVW%2FslcEN8UsjeUcXjRxhxqrq8buwsrEckr1pO5mWUhDOaEGNBXz2djPXfjMlJRJbtZClW%2FoHgIf8mQpxVdzd1iQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 04 Mar 2026 02:44:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69a79ca0-347\"\r\ncf-ray: 9d8083a2b87faa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":839,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3718ba26c2a2acf4c27d9fab9da26e56","sha1":"7ebc63c9fd9828a554de4830ff0d37a0429d092f","sha256":"5fa6c33ac4898cce075162709887e25ab3a6b380995f0eb982bf639c933fdaeb","sha512":"450b7134ee568b76d72591b763c6b54e517ffc934eb1f69b1f80f0105989fe96a644fc4683d7d6ef9dd903764bf024edfe0fe88a2adeff167611dd6ada8f7d6d","ssdeep":"","tlshash":"f101a1b9f65ca876e52a404c6a1eb6f5205e7dd9c34da26038013e3cfa066db74370e8","first_seen":"2026-03-06T10:01:01.582588Z","last_seen":"2026-03-06T10:51:35.933425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/admin/track.php","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"POST /admin/track.php HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nContent-Type: application/json\r\nContent-Length: 114\r\nOrigin: https://scanmywallet.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":114,"data":"{\"type\":\"page_view\",\"payload\":{\"url\":\"https://scanmywallet.click/\",\"referrer\":\"\"},\"ts\":\"2026-03-06T10:00:34.684Z\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\npriority: u=6,i=?0\r\ncache-control: max-age=3600\r\nexpires: Fri, 06 Mar 2026 11:00:34 GMT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FmQWbr26S%2FLJsUmXd9KDJlNfupd3P9yjpwxvhQS3PEWnnxM%2FdKFCYvoan3pAM46311%2BpRSBZlOlXNOZ%2FUJOTdo4gTE24HzZovUQ9vo7RQ%2FgyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8083a0e85faa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T23:33:40.035239Z","times_seen":16398047,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"botbotbot.cyou/public/stats_receiver.php","fqdn":"botbotbot.cyou","domain":"botbotbot.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"botbotbot.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 12:39:52 GMT","end":"Mon, 01 Jun 2026 12:39:51 GMT"},"fingerprint":{"sha1":"14:41:AD:2F:C1:64:FF:6F:8C:9E:29:3F:CE:B2:00:4E:6C:56:E0:FF","sha256":"53:73:06:55:74:87:1C:86:50:5C:D4:54:2C:5D:28:07:AA:36:9B:6C:9D:01:CB:36:2B:4F:08:27:3B:77:CF:0E"}}},"request":{"raw":"OPTIONS /public/stats_receiver.php HTTP/1.1\r\nHost: botbotbot.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://scanmywallet.click/\r\nOrigin: https://scanmywallet.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHvyx7Nag1SX7HxRq1KAAgcrukY4ZE0ogOf%2FEFx7atBa2X2b6TotFJmX2xOarozuuu8u%2B9KjACObTZgBJjbtELcqYhwAMF0630lKqWT0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8083a1ad58516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T23:33:40.035239Z","times_seen":16398047,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":115,"dns":86,"connect":9,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600;700\u0026family=Instrument+Serif:ital@0;1\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=DM+Sans:wght@400;500;600;700\u0026family=Instrument+Serif:ital@0;1\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 10:00:34 GMT\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5341,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b98fc41f8abae0a9be4e01187d69e722","sha1":"cacce422485965fd6248a388f3f7b9e389ea1403","sha256":"1ee3fcce0a4b09402f9e15eb3e2d7cc8c96b3400b5d00cf24bcc2566dc11cbdb","sha512":"4ea82ae3ecada3b22ee7126068fdb59983b45738af1656a744f35800f67a28e45cc9c315b92383dde8bc4a1143bf8fc4b2f0d5a65bd1ec9ccf733244010340b0","ssdeep":"96:jOEaXsXJc+ufOEaX+L0NkOXaXsXJc+ufOXaX+L0NkOxMaXsXJc+ufOxMaX+L0NkO:UwD+rw8+Owl+NwG+KOvWJOvWNHA","tlshash":"46b1ef81046ba510db931dc522cebe32ef1f615564549c74abfe1888fcaac3e5362b4d","first_seen":"2026-02-12T20:47:12.331433Z","last_seen":"2026-06-13T01:51:20.447798Z","times_seen":9,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":100,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/css/style.css","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzYTv%2B142%2F2Hj3dtU1x0qxI5cfY0OpYU75ZVPp016p352nwDsOEY0ttW6Uk3G5%2BOPbX%2BI%2BOYzNq23lP%2FiLKZsiDfheneLUm8xBPE0fZLFy%2FeXQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 04 Mar 2026 02:38:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69a79b1e-4548\"\r\ncf-ray: 9d80839f4842aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17736,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"20358dfe459e9240546b69f20357ca82","sha1":"cc3d26a89a671d24c94938a7956d6abb80486943","sha256":"4e3f8ddecea789eecd003748670d4828741e2b484c9d5460a557e798e8cbfc64","sha512":"cb0b0428d3a76b9a09950dd69943224c7d36879196ffd94336d892ec12f4ef89c3d8467e9a3f09d182f7195830424a8d988865cf9def0fbb3887358211b668a6","ssdeep":"96:psPbKXB0AFtdQOh/RErKbVjQ8ytSr68qy6qNIdlGM6dYz/izdkqRbBRQn2RvaSa0:mzKXbtlhlPp6OP5Tuo+uFgn1h0pU+Ka","tlshash":"5f825559222472b4e82ba751778bdb987358b0844d0de6bc7dd64404c9cd3fea2b2bcc","first_seen":"2026-03-06T10:01:01.58573Z","last_seen":"2026-03-06T10:51:35.915006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/images/hero-main.webp","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"GET /images/hero-main.webp HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42450\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 16:34:12 GMT\r\netag: \"69a85f04-a5d2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVPa7lA4avbMqXK%2BeXxKBp6TKKTcbrRHKPAetX9oU%2BjKdGHSjou5W0MnjbVfsh27kHIVrvfRycA8Uc2RkuDPdqBnlKzjkuOsc%2FTAB4ZLJIbzEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8083a0885aaa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x815, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a55930321107ca724f6aa78841b48e2","sha1":"20fc0c49e5582b733a105ded53ee9d3a8e70b46a","sha256":"7d2941682c8858d2a6f00064aa38f39855659b767e051f79044e7e0851904bec","sha512":"6cf12d4df4abcc68d6125693677a9bdecd68f3f1c3483eb137f72a7c628627c8bbe4e81d55bf71a98811976192953a564234150c1fdc51785fa862cf351f767f","ssdeep":"768:jfwUps2eII7rYDOIFRfvtINX93sfHt7iIyn34E5oNaVaa6uXxehfPaOmP76XcY:Bs2eDqRf1INOt7c5GaExugA7hY","tlshash":"2d1302a34e2509ab31c35585a4255b91c1c887d1dd902ee39f170b6c740b1fbaf1e33b","first_seen":"2026-03-06T10:01:01.58669Z","last_seen":"2026-03-06T10:51:35.940665Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://scanmywallet.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 20:22:07 GMT\r\nexpires: Sat, 27 Feb 2027 20:22:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 567507\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-06-13T22:11:21.373775Z","times_seen":26754,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":94,"dns":1,"connect":15,"send":0,"wait":23,"receive":6,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T10:00:34.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 16:34:26 GMT\r\ncache-control: public, max-age=3600, must-revalidate\r\nexpires: Fri, 06 Mar 2026 11:00:34 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZhu%2Bz7PbxTCOqjDOs9q8D2XCfwbRTrg4at3Uh%2FEftcA65vqLzEi1dyxEN97Wfy%2Fzbw2dEe6jrFzv3wRpT3aJcm47%2BDyjFBR3k4PoXE4NOaOUQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d80839deddcaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24856,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (406)","md5":"277a90fdf60cd9230d2164b5dbcb8aa7","sha1":"17e500d33772607891aa831247f77efce286887b","sha256":"b010218340b751be51ab3627312600493d70f2cf83ebd3e2136b3fd16ab4d265","sha512":"c13038cf7cc9281913eb2ddf5d5d2afd6926dc67916173c60ddcca23d9ad5a36fd96c931343a0cd1edaeec0ac5eb937b4591511e8472894c9950cde762b02fdd","ssdeep":"384:vw4JYTr/lYQ4ZQBnx5rD6SOGMvOShg33QQSM/hB9ei:urD6SO7mlgNM/Rf","tlshash":"a3b28536e9f43477816a829169b227fb7aaa8003c75d210573fc45944fcbe5aec13e1d","first_seen":"2026-03-06T10:01:01.588072Z","last_seen":"2026-03-06T10:51:35.949585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":119,"dns":85,"connect":8,"send":0,"wait":75,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scanmywallet.click/admin/assets/tracker.js","fqdn":"scanmywallet.click","domain":"scanmywallet.click","tld":"click"},"ip":{"addr":"104.21.34.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scanmywallet.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 14:28:27 GMT","end":"Tue, 02 Jun 2026 14:28:26 GMT"},"fingerprint":{"sha1":"37:93:38:6C:9E:4C:9D:74:0F:A0:CB:F9:6E:78:3B:AD:76:7E:4A:90","sha256":"49:E7:13:91:13:44:26:4E:26:37:86:2D:21:02:87:F8:8B:C1:F7:07:28:00:FD:9E:EC:9A:5E:1D:FA:31:76:A6"}}},"request":{"raw":"GET /admin/assets/tracker.js HTTP/1.1\r\nHost: scanmywallet.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:00:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJPBm6wm%2FUpGSoDYAULp1zqzQ4tz9rXTTMWBKCYoPFL8uZ3UEznBSnlH3tgubrQPM3AAy6N26M9irdA2vxG7qydlg4wEYzQPaZ8QklmASngs1A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Mar 2026 02:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a7981e-be0\"\r\ncf-ray: 9d80839f4843aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"00690d613a8c3f90409b8e00a7120ebc","sha1":"b4f47b432e68a8d443809ef99953de13e302fa9e","sha256":"d5284073bafcc87595b8d3dc2c26d29356d4fa72f27b70c7f7d7d90c7d9504be","sha512":"04ba264f2663a20c2b56ab7e816b8b1418a36148a6660c66ce79377c33e246ba96bf922f55fc13deb71789e74c80d18a67aa0cab9322e474b40cc80e0f53ebe7","ssdeep":"","tlshash":"53510b9e6cf760b19a63b03e133fa5143027a0572d86ec61bf4c16205f59a3c51f6acd","first_seen":"2026-03-06T10:01:01.588916Z","last_seen":"2026-03-06T10:51:35.936915Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"scanmywallet.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://scanmywallet.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 20:22:07 GMT\r\nexpires: Sat, 27 Feb 2027 20:22:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 567507\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-06-13T22:11:21.373775Z","times_seen":26754,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":82,"dns":1,"connect":28,"send":0,"wait":15,"receive":14,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://scanmywallet.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 20:22:07 GMT\r\nexpires: Sat, 27 Feb 2027 20:22:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 567507\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-06-13T22:11:21.373775Z","times_seen":26754,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":79,"dns":0,"connect":28,"send":0,"wait":28,"receive":8,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"botbotbot.cyou/public/stats_receiver.php","fqdn":"botbotbot.cyou","domain":"botbotbot.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scanmywallet.click/","date":"2026-03-06T10:00:34.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"botbotbot.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 12:39:52 GMT","end":"Mon, 01 Jun 2026 12:39:51 GMT"},"fingerprint":{"sha1":"14:41:AD:2F:C1:64:FF:6F:8C:9E:29:3F:CE:B2:00:4E:6C:56:E0:FF","sha256":"53:73:06:55:74:87:1C:86:50:5C:D4:54:2C:5D:28:07:AA:36:9B:6C:9D:01:CB:36:2B:4F:08:27:3B:77:CF:0E"}}},"request":{"raw":"POST /public/stats_receiver.php HTTP/1.1\r\nHost: botbotbot.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scanmywallet.click/\r\nContent-Type: application/json\r\nContent-Length: 263\r\nOrigin: https://scanmywallet.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":263,"data":"{\"user_id\":7539823512,\"domain\":\"scanmywallet.click\",\"event_type\":\"page_view\",\"page_url\":\"https://scanmywallet.click/\",\"target_url\":null,\"file_name\":null,\"referrer\":\"\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:00:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHgC4N1octpYsMtgAI1FSQqkPz51OIOAUCLOdPSoUP9sesKB42QXo6vj85dH7ANyJIp073uZ4NWMMlY5wK0XrjP6PEU77DNR%2F4iEb6ji\"}]}\r\ncf-ray: 9d8083a22ece516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-06-13T23:44:45.420818Z","times_seen":10647,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}