{"report_id":"22182455-c287-49dc-a976-7d379b06b115","version":6,"status":"done","tags":[],"date":"2026-01-26T08:07:37Z","url":{"schema":"https","addr":"aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"104.21.6.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"title":"Aave - Open Source Liquidity Protocol","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T00:24:31.984517Z","times_seen":17769849,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"104.21.6.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T08:07:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"aave.com-wallet-cornect.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-26T07:43:05.301707Z","last_seen":"2026-01-26T07:43:05.301707Z","alert_count":134,"request_count":67,"received_data":7527109,"sent_data":37812,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.aave.com","ip":{"addr":"104.18.20.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1997-10-21","domain_rank":913650,"first_seen":"2020-07-23T08:34:08Z","last_seen":"2026-01-20T01:59:06.212498Z","alert_count":0,"request_count":1,"received_data":3703,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c592d6ccb9758f5ce7717a341d66df8b","sha1":"80757e256d829a45b5307d973270cdae630f435d","sha256":"3ce2210f6c25f4ae2c1c6073b18b52b2134c3e6e5d18e292282879d6da2468e3","sha512":"d70113dac730fb6a4b68bc5c40ef9f2cbbd13f983ff88133463359abc819a5f394fd394cfa0dabab162bf8c6cf9a61d28d7c298ec71bccea29f58769f8cd946c","ssdeep":"768:m4Kbycoy94rQSSUyiIe9is5WsYHG/iMqcUaczc6XzW9Cvi5c66cjO623cMOc3Opz:c942LOisvYHCMbt9Lvcn","tlshash":"5f63c7d4965ae0e28e6250dee433e909e4244da3cd6cf263e63cddc6b45df22885713b","size":73007,"data":"","first_seen":"2026-01-26T08:07:40.738601Z","last_seen":"2026-01-26T08:07:40.828402Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/solid-10.1.0.min.js","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"184602927e465f18e27cc8809f2c2ab8","sha1":"9b1a95970347e90d32ceea1e4ada08f50fb455e5","sha256":"a868a9e4a58b50e9f7f4bc3c8701ad135e04bd18fb9c79acefea6025e2dcaca2","sha512":"a59d2e2881083e7d4c1ade2d4fe256f14eb3f2c66906933aba66a723c5c764ef74e0be485b3be7b8b1ce27549c1fc2e23302f513e2c4cae787aa106be51c0d54","ssdeep":"768:bEubGcW+9kDU/aP/0H4Ma1pnOcg4ma91C7NWU8IckacFcW3DW9Cvi5LQ66cxKKuN:99kAu8HFcnOcgm1C7NWEr6GxzZ9Me","tlshash":"3e73b6d6a64ae0d65e2150cee477f808e0684d93cdacf153e26cddcab45ef228857237","size":76338,"data":"","first_seen":"2026-01-26T08:07:40.681609Z","last_seen":"2026-01-26T08:07:40.82364Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/0da2d62e1a58e826.css","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /0da2d62e1a58e826.css HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b98-f3b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57Uhc0ssmceEuCIfSjx6klAbuYb%2FHNcwGMAK6jcMtjtmYoEfWeHwfGwtzouLFsFVcWmFOGT5w8xGN0pTP3tIVoaTm0FKCRxCkyqv1GRv5YGHXmgFSWLzgofS4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f34f9fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3899,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3899), with no line terminators","md5":"20159e23fe460e577318cd2f3dd7bcd1","sha1":"3a4e3bea46a010205a95dea9633445a2adc5353e","sha256":"9be9b2fb99ad30c8020292c00dc140955f606ee985c5585fb9599668ce3c1050","sha512":"d440b79e5f6643b0cd49d12791566166be14f2d8164643b18d14bd8f6296fafa4b9946fb254e891e59f32ee9d24ccca74be11922c90f8a0d15fb402dee4fd18e","ssdeep":"","tlshash":"8d818621251f5945c9264d423acfbf237d1b343910290a61a63e481eedffda753d1f29","first_seen":"2025-07-18T12:48:41.120044Z","last_seen":"2026-03-20T09:07:05.759698Z","times_seen":41,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/oseth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /oseth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba0-2aa3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejRqHB7czk2im0Kc7G08vw5C%2BRJBGXzSUqO84dOUPlFjeJGF6V6dMuoCCBZOfV4O0tfk2hnam111MX3EZS%2B2fHj5yA2JD97xouQ4RotGr7FedpUTE2h6Q6P09w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f37846b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10915,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c16dcfe382e2be5d36f63c57803c0a1d","sha1":"90a90043aef8f6b5a9de7ccfec36179db7a141f6","sha256":"f795e8c663dbfc6d7b1aabc3d99a2287b62446d17db5b524653dd768c93d556a","sha512":"010540c558c07177560a25a53fecb9afde86a445999812a28ac7d1fa1165c9b344d0a226f31b85a703521f788d29ef092c2b14b86fa38e3a00eb57a33bfde791","ssdeep":"192:THL7UB/UjRF5U2UzS7UBEU6yF5UvUz97UBFUF7F5UkUzs7UB6U8eF5UDUcxF8Xz:xQ70SxF8Xz","tlshash":"6832206ad72da977e29ec2adee84d079201c28f782945318d5519b2f401c9cb1e7ffd0","first_seen":"2025-08-31T09:53:59.56113Z","last_seen":"2026-08-03T10:59:23.189246Z","times_seen":37,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/rseth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /rseth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9e-723\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHefSNu0Je6PhBVQpwGM68SL3oAlTkpmeopbivvgsIFb%2BkR9XALgwJAZ%2Fhpp8yputurZiXA4hDklhlKggNmFyputLFzXpNC56oD9pXa%2F1t5QM6bZUL4qMT59SA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3784bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1827,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ac691d39a48e87655bd6ba2261d5785","sha1":"48ae5221dafb405e83ba3ceb6bcfc6931aa5e508","sha256":"7e1fc33f274b4a2d39c778902aabcfbfa6e30ea4a863f19eb714a0a7d6939289","sha512":"031d8f6ca1d5a62cc27fcbcd44393f3cde28a0c2b676feb6ea390c73842fd0ff9708e3b2d006416636c2bf9df9727da4613d0adfafd4de0f060cc120afb054f9","ssdeep":"","tlshash":"4531b0a8455c64da9fa20be7ffbc6056202978dcd5584de8b704070eb346e9f7c61981","first_seen":"2025-08-31T09:53:59.394494Z","last_seen":"2026-03-27T12:48:00.661731Z","times_seen":28,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/lbtc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /lbtc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b98-80b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqnEcXd1iHTAPzuUJgpIo1p4y4tXZDVpLZ58ZJySVuDPF63ddJQh%2FZKAj6c20RWgP4T2JaDl%2B%2FeUaQR%2F1C%2FN%2FTcv0y2jG0eWaFDsqQ6H6vcQ2HRwLewA8qSQpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3786db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17b80b5013ebe04c31582f444fa91419","sha1":"3ef3d38aa244d380469d9f4e88571a59295bf0cf","sha256":"49942f29bc26f5b709ab20fcf88f38e1fe5a16faabca7cb2e3c0adc02006c3e4","sha512":"4bd0b1fd59fb060e59af1659520d0b2f675442ae14188322510db30c2ed8bc3aff9e2fefd03a4322a4049d7771e92a62a1647acb966a645b231057948a84d01d","ssdeep":"","tlshash":"154153a8f73e2462e959836eeb68ddba124e11eb9044c33f81ad2b4861185cf1a14774","first_seen":"2025-08-31T09:53:59.293036Z","last_seen":"2026-08-03T10:59:23.225811Z","times_seen":35,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/cbbtc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /cbbtc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9e-4ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtQMaCrzaUjRXzcFeJRxcv%2BPvZ5ayjkUi4CFb8%2FiWL4Ov3obVeGN9W%2BMeFi2YxzpuDBg4PEjxLEnnpJ8JaVoh0%2FLNOPvDh7YyqFzsIJIwrZh102cUWlWsuyKXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3681eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1210,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"daa7542cec9813efa8b26bb8fc5c2650","sha1":"55ceebb74db91293cd0da63c860a9b8b5b94c0bb","sha256":"95946c34a6d9b564fc8c949d698867c86496f2477e4fd2298ccaf133c1241c23","sha512":"b1546126217e1c8e17613c1fc2a7c6b06493340b47cde3a7e7bf195e368343b0eb300e64276455d464acfd4b92fdfbf316423b896897036453969b589070ced8","ssdeep":"","tlshash":"5b2184e94270624c18ca4e1dfb18a9422017f6bca1299dc45abe589830cbee8bbd0550","first_seen":"2025-08-21T04:25:28.655978Z","last_seen":"2026-08-03T10:59:23.168744Z","times_seen":40,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/syrupusdt.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /syrupusdt.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuqoWjASIuNMHyJIvcsfz%2BAmISIIjrdatBq51NGd0LpGJntPCvPT026O%2FDmrFeNAQ1%2Bql4V33zw201C497qynBjtdhHlazH5yD1XolJHlM3vtbKRKx8OpVY%2FcA%3D%3D\"}]}\r\netag: W/\"69384b9a-37f\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f3888db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":895,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47b3edf878dcce651af600ed1cd03aa2","sha1":"f5aea543a628c94af1665235d9eedc167a5c6089","sha256":"429c0cc8317740c75434d4d092aa46608151ecc78535ba876dec1ee2ab2d1195","sha512":"0d1c3045b7cc843cddb4e90b8007fb903153839a29847f6e795bfbf5737924d82dc77f57b676a4a9f29cb91b82066d573231eb625908f13d0b67de47433a37e4","ssdeep":"","tlshash":"0f1100d443908fa4d7c0cbbdbb345cf6322212fc32494decc2d91b40a9c7a22a41d6c0","first_seen":"2026-01-26T08:07:40.676751Z","last_seen":"2026-08-03T10:59:23.239435Z","times_seen":7,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ldo.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ldo.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GylLIQk7kL0nqnn2kq92wQDXRotFIkrnRMAhSOJa%2F843F8Ks3T%2BhxPWpC7PRH%2BTeuw4xgGhfIrpq%2BSIyG5gU8VjMjC6MceD6ke0AifB3ikLII5E0XIf6Yt%2B9Lw%3D%3D\"}]}\r\netag: W/\"69384b9c-24b\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f3990eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1abe95ba0b9e48689c268ba22f6d2753","sha1":"76b128f6c642d86c90f6c599bdd7685a536e9f9d","sha256":"006cb909e488c280cbc6179c9c6d0b60b9fbbe0f184e197a60d79c7526ab4588","sha512":"50820c1733b634f3202f2c38d24c9d08249d7bf60148c581bf17394fb59f9fddc881c57efd875962e4946f9a39ec2578999fed61a96ac8f8e0a3e3bf614f2da0","ssdeep":"","tlshash":"c0f0e7d4548c7918b804427fab6db1c53433708e21440e14e0641f08359fb5fb981bde","first_seen":"2025-09-11T13:22:04.529771Z","last_seen":"2026-08-03T10:59:23.173184Z","times_seen":33,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/reth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /reth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba2-15799\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gOqbJn8ozWXMeztJIkcSKMAw93wu0Gna20wDHPLvDpJ7wyP1XgvkVKyt%2B7AHGReoZZ1VbFCpJvXJ6fWcGhFnut0b5ACGiRtZOtLwbYHxGdXeW1xILbrPL5zuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f38893b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87961,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f40c3bf3302266b5b5f63e78b886ecd5","sha1":"64095acdcc12276bd301a9386b2546bcfba18835","sha256":"f0d11629b8d4996314430ca01553d8574708e4f16c16553bdef36cfd712f1de4","sha512":"f50ed6731ea9ff4126d738f00f4bc8620b202102b0762a47c5629dd0e05605c60a64b75e662c3b6796b831a33a896f0b1f79cffa2630e822267b57f6befb2843","ssdeep":"1536:C81z5w3NEDLz1Ex746wSIJKuf117i24FU842mhkS+FM5nZ0gzNyyUNdtjf:C8nwdGEvwDkub7i1/42w9+FsZ0ayDvtz","tlshash":"e68312ae0001bf8e4bd6c21a21688e4d17feda48035a1155aff3c9d241c7ede95a6db3","first_seen":"2025-07-26T22:44:21.992079Z","last_seen":"2026-08-04T10:45:26.868305Z","times_seen":36,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ptusde.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ptusde.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-675\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVmvmKIZNiJ9y0V5uiyOQBAEzME7pwsF2hxJy3qbL3WkT5Xssb2KWOIJY%2BhH2GWoAe7Z2lpaty%2FD8x4yNltZyXkbGUHEg0ri2eNjjM2QxhRYMm3FH6VEMUSNwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3889db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd414e983a0bf4663db4c1986c88e857","sha1":"a82d8e1b388883d31b51c87a709ff2940a2437eb","sha256":"ac4768c52913f38efc66ec6cfaf9dc4a88ddddca1dd0105e72f76c07ec8ad56d","sha512":"10b0c788d154b7f9e6c3ad6aa1c07c54c4ae4a38a3893d25c9e9952d8f3719064a4407578655981271859ede03a2df88ded410dae784c6d94dd4dd3d49a0de8d","ssdeep":"","tlshash":"003166d22724e6fc0546c72def34247c71aeb4f8a66a2f84529d8904a5d778ff80d059","first_seen":"2025-08-31T09:53:59.575389Z","last_seen":"2026-06-14T20:15:17.577951Z","times_seen":30,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/bal.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /bal.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NdXMxzvqHEJZT2SGD%2FVGNAxZLjeDjn1NoU6Fk9QWyOSJiMliEwUkwtyzLaZLYVGDClkX1Ub%2Ff1EdLNohEHvzyPBK3po68LVLAUKJsUGQVhyE8bc9ZLQODozF2A%3D%3D\"}]}\r\netag: W/\"69384b9c-38f\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f398f7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":911,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9992974501e13a3f2af30b9c6f5b2ef1","sha1":"724cbe9c2b7d3e8ba720be277048caafb85f2328","sha256":"c64a88b6188c55da9679fabe9c5deb761defcb572a1747a6d64dc0220128f185","sha512":"fc9fb57f7cff78bd38ef8ec1daecb1743e3ac12052c4dfc9d96150ff12a441c18a5752c23185465f7d376f2d6c817b54597fbe0df2ae8678e830ba6c240a1b10","ssdeep":"","tlshash":"f111ed945234804884470fb5fb1a6cda1729b07d7c2546859ddeeb7d209a2b2ce22484","first_seen":"2025-09-11T13:22:04.659697Z","last_seen":"2026-06-14T20:15:17.61191Z","times_seen":29,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/crv.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /crv.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9c-209fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIZmCJPdN0TH3KJf%2F7ssHEMy%2BQLolJxe55rl8a5tUkE32PXmig%2FJhuCIfHBUNYYi2SfeLBYpgMxqPlEdNu3qU%2F%2F959Tz3XvYNCtb3lgS5Gp5zqZbz9e7mr%2B75w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f39909b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133629,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab347e24e5a26e2cb7265bce2f984c1d","sha1":"baeee948d7243278eb982c16f9c781aaf866db03","sha256":"df2e1162760e1ad3a487e92f528939977c0f9d45ed45dc9b88715b1f5dec2cd8","sha512":"49460ac6dc1f700667f052bfd12d44d8e4ec6b0d9ae964c7e7b75d767de9d4d83405e8625aaa5a3364da77753104c32389a5d0d1ada842d94147d036622c5848","ssdeep":"1536:3XuZZMmi9kwqMC1ItCz1CUbqnkvZp5YTnmmcJkyae/683:3W","tlshash":"bcd3cbd5262c71b29d878bfbdfac7076542a60fd05980b887944660026d9fefe9e4fc0","first_seen":"2025-09-11T13:22:04.577668Z","last_seen":"2026-08-03T10:59:23.180979Z","times_seen":33,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/rpl.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /rpl.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:40 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba4-2dfb2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtgKIKoPBtMEWDqd7F3IXel9yP3GiG7p1uMoVMRVqhaY46jwJRw3g36ZHpWstg2nF7Fc4rmQBNrCau%2Fdc2tu63cDI1K%2FZCTm5Wf0iTuQeVMHd9rT68neLs2Y%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3a933b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188338,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9cef4bfc85c6b18d486d8a9ca9953cb","sha1":"a0213b945559882ba992a146e554f4d358d1c22c","sha256":"4ab2a0af3b6ecb8c1deafe7b35190608024705d7f7e9623fa4831bc0b02101db","sha512":"9e26510570c22bcb2d33ce2b56d3dc6f6ea635dbae647dc1cd8bfb79a3af67ba26b02bad57282e556fc8073ffefd0e49eeb41bb46a4cd1431ca71a9452dbfe05","ssdeep":"3072:Xf5Ei9D6DLqOLhPOUFhkyPi5+h891fAlNsTsdxGp30DgLZr6TtaqkyMkd8t0YzWw:X2i56DLTtOUFGyq5+sAlNsyxNDiZgar1","tlshash":"9f04235a16eee77e13838332b47d2f4c5949dec2d0580c5677f3b28aa6b269201df51c","first_seen":"2025-09-11T13:22:04.502945Z","last_seen":"2026-08-03T10:59:23.285079Z","times_seen":32,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/sdai.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /sdai.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9e-44b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QGBpJq4d0Lu6GKpTXkNm73csoj1Wt%2BZezcQ14uqllFAABRAAr07V5SBnDk506PjPCbD6UcF0kerHwrtA1BTDx%2B5dF7aHd%2B12neab1%2FjU%2B3bV6Oufw3OeyVfhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3a96fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1099,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"751fdc27a85396858737e736eba0913b","sha1":"7e5efe697b8e594cef21212cd750157221478c93","sha256":"64fb51cff846f5ed3b75bf966e57639211d56cd51b94fd21fb00ca83341ea983","sha512":"b3de2ee0438150be67af44d9b3a5c966db48cff14b6ae181a1c4f5f7bac975047880164e8fdcb743b1cc6b8c07a9808f8ff8002b3478934000a4c8e68b67f951","ssdeep":"","tlshash":"e911634ffc2802dffd40835cc67410b9227eb0d674b88115da4c273c624795d2f14768","first_seen":"2025-09-11T13:22:04.646606Z","last_seen":"2026-06-14T20:15:17.59291Z","times_seen":33,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/eth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /eth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLtJff2CtddV66QzUj5zP6wRsFLVZkuC7SVLVKJdAUSczKhHCz2ZAdnLfjX2E%2BZQ9qxiUYKa%2FcVMnbBa%2F9V%2ByIkwtLCgDDq3ov4V7GtOI3c9mxJPmTBrPHOamQ%3D%3D\"}]}\r\netag: W/\"69384b9a-2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f35fe1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":679,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fa671d56334dbc1e3dce1a85613c88a","sha1":"fa03bd8f305769ba2551a91f5896fc6c5ea50798","sha256":"2c76d6486f0ea08dc768b7279e9b812acf22521394ec022bc6fc7d081bf3cf96","sha512":"0ff84fcffdea56d58b64a65a3e1391c088b7a2c3068e67fad960121d5085eecff1378017f21a5a15834de57020ee0741d0cb3e5163577dc7e78c4c633db90f7c","ssdeep":"","tlshash":"57017bef6549606918518bf9da6d24276c3946e010040058eb48039933cb3bfdea1ec8","first_seen":"2024-02-12T03:28:53Z","last_seen":"2026-08-03T10:59:23.17264Z","times_seen":42,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/cbeth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /cbeth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-470\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9zZsghp7EAHnCGd%2BXmUFta%2B%2Fhlxfyc%2BK1%2BlG3zPZhCRxrRZFMeuXzWu54dhnhStc5FzO8JRyU3SnBPDsUHajk55tdXAsmSRmyO2IPIRcPoLcchWKCouNA%2FK2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f398d8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8c215db67c8e887125cece0bdcaaed6","sha1":"01c721c0c7ff5b917c2242ba122f9d2be55d7a92","sha256":"4d5765e796932a77b5898d9a18ae7e5736b25b91ad531602c55cef72f68823df","sha512":"b051b731d24a37c5eccec1b07d30d3875889cd2e542f777deb448146998cff0386f31fee104618a72ecc359fdc20f495bbb90c23a2359bbb01abbfd6d4b8918f","ssdeep":"","tlshash":"6921bec7be1050ed4c52c36fa6bc3461f4bd90cda0181788a588872865aab9f6db5bc5","first_seen":"2025-09-11T13:22:04.491489Z","last_seen":"2026-08-04T10:45:26.910211Z","times_seen":39,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ethena.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ethena.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-67a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wR%2BJZX4xAyII5M%2FkCJU9MCmZtaIbOpRur3qj%2BBi5xZoFCk3AYgIuV2x2HtPvC%2BPRIyPRHPq4rD%2B%2FvPlf9%2B4l5fhE1Zbu64blNDWB05D651%2B0x8DsUymEyyhnxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f36828b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f44d6f6c8fdf5a8a544b8afaa2b4416","sha1":"2fc87c2ebdb60679121ec92e82d2a7d0f8980366","sha256":"fe33bcb0e0edc0488f0188aee9875724be085720ed6dafbfa89e70c80c75cf79","sha512":"da66340e426b9c4837fe5b9e62ed04b648e36ef66939a243ecf622249dea8337208b1810fc2616a5c5212acfed964efafaf838e1e5bcc69d1ee6c5dac97cdbea","ssdeep":"","tlshash":"e13111d9ec0924abf004a3bcdf6d40eb32bd519629d34c1886a94b9d124517f7a0eb6d","first_seen":"2025-08-31T09:53:59.624174Z","last_seen":"2026-08-03T10:59:23.21227Z","times_seen":34,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/uni.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /uni.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9e-1d46\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vviDLjGV1HqmWLQGdxuXpgKF0SYpaOUZpxa9AasirwXPtwPInsz5cRydSNMou1EvlH3e2ZwqBV9toVPOM6BtdyVCiEt9xMawC5LsAYcYg8kkQwfkgODczOSG%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f39900b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7494,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d68a5d8926ce0da76ab6f2190922ee35","sha1":"a163c2949f8c416d6c0bced919b9f72f8ed6e1e9","sha256":"419018452819c9f518277b45da1032ffc403039c9b8dadaadf13566e9f1ef831","sha512":"c553fe632b264222e4018d50d4776994113202dac6869e6ffd5dbab38f16707c27a5c7faedbeeeb41715de2738f30dc41ac98ff58473fa6f62b48cc07e9bbdff","ssdeep":"192:OKWE9nAm7pLAerVL6kV8ehEdOV7Ugt5ROKn9SmArYiC:T9D7pLr63OTUGrv9SP05","tlshash":"23f1b6fb6bb800fc14879b9eff9198e9630dd0ba7b724b94467c8970269394cd94bd10","first_seen":"2025-09-11T13:22:04.493507Z","last_seen":"2026-08-03T10:59:23.255046Z","times_seen":33,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/kernel.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /kernel.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpKzzfU4S%2BqBQloI5YsOt9dfjjwP3C0FmhrTSdgDpl4Vp65osU1xfh7LdamyXi%2FNo1OFkSuANrM4YgGNzrQ7KB2yx3V%2BAmq%2BDnEUUJNh4BcjjH7HBJXzRHRQtA%3D%3D\"}]}\r\netag: W/\"69384b9e-281\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f37851b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":641,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23f1e9598e7179075039454d22701628","sha1":"c798ffc5685fd5b77c42928737b50fe79bf9a80d","sha256":"866b2b826e548ef97206c32bc1c508354a5e1f4e80ae93399ec939a55624d476","sha512":"464efb617ca51c76e0809b8bc959a85d52474ad118ab36995d3048263fedd430c922674ab9f19f74efba4bc94e73bddcfd78d7439e83483412712dd11a41b8f7","ssdeep":"","tlshash":"c6f078a881d43e502c4644ece1b8f180d83f90aae7e48edcac7d131c38482b28950a9c","first_seen":"2025-08-31T09:53:59.5217Z","last_seen":"2026-03-27T12:48:00.627843Z","times_seen":26,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/usdc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /usdc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba0-402\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Asb%2F%2F2FVUg1SOpC8XYrdeqnh%2Bwk%2BG8mQaOGecMguCwI9yXQorXQga39hCP0VCPHc9mnN8%2BATG2aF6zz7X2xdaMG14S9wnVLJxGmklAq0a60jWDOfsvhvSENoFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3680ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a35924e36f0c860c4c164510c73fbd9","sha1":"c5db011c4b657c4711da395092d374d829e4a518","sha256":"da2ebfc73ac54d8fdb728047061b8230551e9f6faadc7836a5fbbdee7e968646","sha512":"b00f13011ed662da56290e8d7c943bd63df1b83476017f23324ec4731b99e28acbdb03620750774078acdace19e37f93efe0af50e1349cb43478c54d1fc4824e","ssdeep":"","tlshash":"12119ba6a2ccd3bc0843ce9c9e759411eb0fd5b93029e7a00d9ed7b674175c6e603820","first_seen":"2024-08-20T09:50:08.865065Z","last_seen":"2026-08-03T10:59:23.317635Z","times_seen":43,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ether.fi.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ether.fi.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9e-96a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dIzYJ0NgcYZtj%2Bqu2ar4GESlM0bNHZdPsZd1AjZ%2BSCnyOCJH3rsYAEu%2FF5pj%2FphWlCQgLtSGrUrgB8La4GQP2P4oA0f5X88H0mzMR6SXiw9JxUN5BKDjMh8PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f36ff0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f5e17d42ec8583f358c0977fdc5033c","sha1":"811d6d77ac06b97d22818c634cd024a63e834bf6","sha256":"b63d3003ef581072322bcf050f280669c71c3bfa7f42c787c4ba45e782863ea8","sha512":"b3c6f915a2e13cf55d1dd33842aad67f1c43416a86e698ba47bc55bc3164138da2477630f2b701e2c6de70f41c952ff5b7f585c31b4e54ab8d12baa9b0fe5eef","ssdeep":"","tlshash":"1c4174f576b4559c2094ae69ef15f5d7933eb4fdbc82c311658e7f8888d22c2ca47600","first_seen":"2025-08-31T09:53:59.542979Z","last_seen":"2026-08-03T10:59:23.278682Z","times_seen":35,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ethx.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ethx.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mt7l5cWndIPShrDIgqIyvb3YOCs9yWV0EfWsgtfXijRsTM8cM5BmMrPhqwOZQiQH1ZxR9bNR1lcc8Mm0Qy%2Bk0l1ZAeDV1CyUJYMHnWP48gyU%2FZhCpxrfjiGnVA%3D%3D\"}]}\r\netag: W/\"69384b9a-3bf\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f388cbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":959,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a21d35e767c50f95674118166415992a","sha1":"891cda1bd006e9dda59924cf77ef09b292de1938","sha256":"2dd84f5f7f4de5724a023b2e2a22d542aeb401b7fb807c186a94e16a47cf60df","sha512":"ce84ae26f9076ef1d3a1263baa545ff8549b74f50cc567d4516b91734ee333b8fae40f5b417f64bb590349c2936881cf93bdf91f6c79df0c5152f72866306f5c","ssdeep":"","tlshash":"3a11b1e253287706154763b19f6c34f5623db1f129c80989e14855b061d276b7e53e5c","first_seen":"2025-08-21T04:25:28.651011Z","last_seen":"2026-08-03T10:59:23.288614Z","times_seen":35,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/lusd.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /lusd.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba0-7d1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Csfnbcm8aUmp6nh5OL5ALdRKBVUH13YrkbsDTj8eVGXl6zc5Hl%2B6p2npgTxcCOW4cJnKJVmHv8FXkJiRHdiB17A7v6DSytrQLDzobL85pKoFzrQqIW2e1R1VGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3a91db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71a17c454e62779a8d21c0bb38455ecb","sha1":"f6c5f1725b196d32bae91f966e4b4326c8828abd","sha256":"661173422e2427fedddb0e10c1bd433b6576eff99dbc76e188bcb8a946d31787","sha512":"043ce5de299d462302045fe41b1a15f827f854b7bb3dd9e1e45412090095e36bece56a0f43f9e33335b84159b4ca3165b24f3441ad2a8466b0f0de8e8f2f9ce6","ssdeep":"","tlshash":"9e4167d5a778f5bcdd875b75ef241075773e18ac3501ca20478d599884830dcfd17680","first_seen":"2023-12-08T00:02:56Z","last_seen":"2026-08-03T10:59:23.30796Z","times_seen":33,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/musd.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /musd.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba2-689\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqojgNRAVXFugyvxTr7BTMoWWFjm9Z0j%2F5ru7eIU%2FIl%2BHU9RM91DZRBCIiVeeIaghYqgBGMH96JEplV4yZZQOzfIo1e68ZO8xcLSrY2%2Bz1yga%2BwK%2BgowWZ%2F0oA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3b9e2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54b43de560e35d6b3c637ec4c1986740","sha1":"ea17c274f48c1ee5327d0fd765cbd343d95ef72b","sha256":"d4b6a2d2a4242ac4020db19f700f5cec5394eeca970f595ac6fd27410d52bdc1","sha512":"843c2012e5bd9b473e5d2308ef4629e3df68be20bfadd487e56dc9deb9613572b4d5597a779cec2e21c278378b433759121fcc78d8463ce38f5e924abb5802d9","ssdeep":"","tlshash":"da3152d4b67892a86e00c76e9f29b5fe321b40dd42550218fc662f087a71b4f58a8adc","first_seen":"2026-01-26T08:07:40.710801Z","last_seen":"2026-03-27T12:48:00.637677Z","times_seen":5,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/secureproxy?e=jscdn/getFile","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:14.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://aave.com-wallet-cornect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"w6tnco8598xi02x1c5uu\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 26 Jan 2026 08:07:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Dec 2025 16:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvuBRtlLUoVIasVnPzOneLISh5nSH48rUBUb386qD9ftUDETq%2FESSxqAvaSFtrt2nVYD%2BH7RPp5ytqSfsF0xLi638wNaHjdVmsXHAk7SKCzETIcA9npQ03nanQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f97b6ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-07T23:58:39.784881Z","times_seen":7441,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/aave.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /aave.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNWbXLGyho4XBWz%2FTwrK6PJV3ZD3fhJPOHiu%2F6DQx%2FteDY1GurEZRzmbotOgvhXlCm7kiGHNqvAxHUUManGpZ2LJGM78JjrzOE7lz0lspCkBxSpcy0hGfl9%2B5A%3D%3D\"}]}\r\netag: W/\"69384b98-355\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f37865b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2d8f83525f694a7eb3da04fe3f8da65","sha1":"901b2cec5b2f25db3a495e6b000590dbfe40795b","sha256":"db4387bb50e8466cd3e147c0f62c3c434d914465e172c487a40bd2e2c439dc68","sha512":"a3e58b3c15a956de7967cfb67662cdb4fa4a5dab244cb11758789e70ce491878fb0d18d0ca4b9bee0735e718c2259198e0f520c51c75cfa06b655fad95f56e17","ssdeep":"","tlshash":"c20188d7dbd83374be49930aa7092426343b00c16f148fd663eb7803f360a971a8a0ca","first_seen":"2025-08-31T09:53:59.457408Z","last_seen":"2026-08-03T10:59:23.27985Z","times_seen":39,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/mkr.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /mkr.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSN6nRxnGybWCk5roCKGB1dMEPzASkIw62U6mfkrfeGzt%2FpDluMMTpE4CNVbvLuZBD%2FdyaknZNzkvV%2FEL42rwD27%2FzIkH5Cokvv8uDWlsvhtOBbfiOlwDHkl2w%3D%3D\"}]}\r\netag: W/\"69384ba0-135\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f3a917b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2df789c5f27642a9cfd2d42896dad9e","sha1":"7d0e562a3fc4eb3280a924cbcf0f90f76d058f1c","sha256":"48f92294cbf0d1b8af3953e7d82e42e3bc102082dc2eb76fa38244997a137d7c","sha512":"fa9940c94884e0c242238fec25c5a96c04a9c0437ea359c784bcc2af4bcb91fc7c80cebb9734aa014d38e8ca4cca08138a6a7a17b217b168ba73ebcedcc5f8bf","ssdeep":"","tlshash":"9fe07d9ba724f8480c55c274fa2eb0d5102720cc2ccc1cb4f2801500f8001ef1444d55","first_seen":"2025-09-11T13:22:04.524626Z","last_seen":"2026-03-27T12:48:00.642303Z","times_seen":24,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ethereum.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ethereum.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5yzCb6h%2BbMWqPGf5BMGQlWCLfgckwATRzVqEy9YAiOdKpFEnNmIM2HWbPP1dlUbjtFqVOwP%2BNVHga5Adbv78Matrh3u1i%2B0nDui7GAqQljWPmnawwq6rinS%2F6g%3D%3D\"}]}\r\netag: W/\"69384b9e-229\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f35fb7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76ec4c25f7689ae81c261b1a13cc7383","sha1":"bb1e8094aaa8ba64c8db966f158418cca6ba2b79","sha256":"a421e6b0c80f0f2b66447ca402521de565992cf74d69e11e772ac825c79eb974","sha512":"b1e7d771bd44a6eb31cf3ef62e75e28ccf16897ea12e91414eec2895685b499b0ca8a09cfb97f48a5215553f27f845f9cda8a2064078e1135732dd773d82a181","ssdeep":"","tlshash":"eff046e859287454646b1ffcda7c9893316b70f80b3d0ce9b1841602e54995fac92b88","first_seen":"2025-08-31T09:53:59.213777Z","last_seen":"2026-08-03T10:59:23.33135Z","times_seen":80,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/wsteth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /wsteth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytXDPMp6DvOvBNtY3OB2poyGKhnUr3JHXp31IMHScLnL2RmAHDD%2FvDYmIzYqq%2F0oN0hadaf3ltPVI1j0XIQvZBwb0n5PnM7sGygIYre0TYHzDdE8ZPY7ysspKw%3D%3D\"}]}\r\netag: W/\"69384b9e-3f4\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f36ffbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"098808bb5b21077ca684507291a56875","sha1":"4203193bfab81a4bc0b367231f1f26d0ab1216a4","sha256":"9d65a2337ca666ce755faa4f4927672a5d40e2d92abfa85dc508ef05b4f53112","sha512":"ff3f6f6dc61104476832c3d71673d461ea5578612d66cf1b02af3ec003b9da88fd792cc8ee7689e325145d32b27a5824ccfbab4aea7e0e37f46dfad290dba07b","ssdeep":"","tlshash":"6a113adc960490f94c9657feef5ce29b002b60c9a364058cf7500b50a382fafad61e4a","first_seen":"2025-06-09T10:46:44.897985Z","last_seen":"2026-08-04T10:45:26.947178Z","times_seen":64,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/eurc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /eurc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9c-7a4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FiYdpycIBremXd5vL20llZwuht%2FdLREYM576TvZebT%2FhycSbfRZjX3rqmb%2BQef%2BRM52Kjua2%2BjyH1x0217xAdbjV8qDVZUs6%2FAnVJOiDF8a6SFMo5P%2F6XoXCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f388beb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5444a53e3dfb0453bdd6894be1b6f3c","sha1":"02fe6788f72c94bc60d14f561c7d53d947eb4385","sha256":"bf49188fdeca821333aa029eb113de0c34bd27211c7744f56dce186c2cb47fe6","sha512":"aff7174cbc827e70e5906452802428087ea3c854dfd4b391c6bcca5f372f0053e7192518333001cb88cc77316fecc4040035d6509ade32d94822d5dc8386cf6a","ssdeep":"","tlshash":"424154d9db7828fc71d32a5dff16acac3b2f78713335c6a1c61bde5990e19209549810","first_seen":"2025-08-21T04:25:28.63347Z","last_seen":"2026-08-03T10:59:23.260473Z","times_seen":33,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ens.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ens.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba0-878\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5yHudhK%2BUDXUxBuh5yEbS%2B%2BED2cfvv2YH8OFsWEM6GLMJXAIaS%2FAYz%2Fsc%2BZLAeSy9fpUxlKfpiijtezcv9Uqfhs%2Bh26TjABHoLmIc%2B7uLitCu81L0g%2BK58lkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3a978b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2168,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e14260b20fe2b94ca3353f3b9abb1315","sha1":"1559bae103268cd93beaabcedb66a4496f2a1d37","sha256":"9f1a135710518c542f3b72d66994ddcd18b48a208ab88a5b580eb6146ddf3af0","sha512":"1c13e1ccefdfb4ea44826c2eb142053ecc9809ce5614edab9875914ba5a7e57bfc4a81f92e0d813a7a8481be8d4982229f4e9c88825b0c8d54951706d4e16b7d","ssdeep":"","tlshash":"4941f3e4b7acd1fce14a8fad8b304459330e197e36a0cb61896c977e64e2147d9a3853","first_seen":"2025-09-11T13:22:04.462709Z","last_seen":"2026-06-14T20:15:17.583604Z","times_seen":29,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/frax.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /frax.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba2-7e5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rd4TKWhvl2xMp7h7Oy6jDRTMUW%2BCfSztwiS7pICw8K5nYKFAwZ7jpuEFllfZ1PnbjlVzW4EUiAHxRJ1WCGn1S6ocqvtbq%2Bw7E23OVlzz7f90jWPeVfqSCgiWYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3b99eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5abb028976e5cb481fec717b92a9070d","sha1":"b519de7341c6f64a330943e1c81db68cb73d113a","sha256":"8284191681d8e3511477955e2447891a3b91d68a306d8ce8251046a6bedd2191","sha512":"9c9f8b5eceb52d4c49f895f19a4c17a34a1d117aacc6b545377c195b5a1ac491f7ba00d4e9f69c1d2adcc50d070a722aa291414d11be0f7ffb96b128b46b554e","ssdeep":"","tlshash":"844135dee7b4e3b86dc787edef3014597a1b607a62290a4d41690f4da1c7ecc5941cc4","first_seen":"2025-09-08T22:28:46.627415Z","last_seen":"2026-06-14T20:15:17.56302Z","times_seen":30,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/Inter-ExtraBold.d65f0281.woff2","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /Inter-ExtraBold.d65f0281.woff2 HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/0da2d62e1a58e826.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106108\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:42 GMT\r\npriority: u=4,i=?0\r\netag: \"69384ba6-19e7c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8LTAvHwG1xzxTN8mYJHQRf87FTq%2FWasWsC%2B0zv1xbgemPSx1M8wF7EwyQtlLlWBO2tLf3LfRE758rmk68rsKB0hce8nYDNx%2BEcWtJaD9V%2FAbd3Sn%2BuuA9mTN1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f73d80b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106108, version 1.0","md5":"37da9eecf61ebced804b266b14eef98e","sha1":"72f6e4d5124d09735da3cb97ba05f126c5651997","sha256":"307d980962214ffa01b106339edcb5d2e6ef3a9607b9b815bb7287d2c735c68f","sha512":"143601646b472e5309cec049cf7fb00ad93bdd3812df9e11a71c5806c2d086e2454c341a61447016ba240d9f6523e112b20678a439c442a6efaf817dd5ccbcbc","ssdeep":"1536:nLj6taUgda0xgEkzkFDcgwkUWTCUSj03LX8SbGeLDy1FAk1l+3WhLU+EMDPTGCaT:vUgkGgbS91UWTFSjpStLDy1FX1+Q1/B8","tlshash":"f2a3020157d5a58ef95b3c3ec5a284ca546e27b0df3892eaa9d73883370cde2016f52d","first_seen":"2023-04-05T02:48:14Z","last_seen":"2026-08-07T18:30:26.168858Z","times_seen":2005,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/Inter-Bold.579e0f95.woff2","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /Inter-Bold.579e0f95.woff2 HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/0da2d62e1a58e826.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106140\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:42 GMT\r\npriority: u=4,i=?0\r\netag: \"69384ba6-19e9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vghHhpslM2a9tBywZzftmH2JfCnevADE8Do9fRGRPtWxPOxr9sgapv8%2Fw3ryDt8eTQl0ttsEkAk%2FARzFEBOBzyAD67Pp1PtemZusJthwpfOkptPdUqBWOc1dmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f73d7eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106140, version 1.0","md5":"444a7284663a3bc886683eb81450b294","sha1":"1e94a0dfac8bab0947ea9b0b6fb663ebad5cceb5","sha256":"c63158babcb7902203ed73476ccf901db34825ea524d4a36a52b5e5f97e1abf7","sha512":"7be12803aab99ac90dcb4d56ebdb682612f8ecfaca95a2b60a9b5b06f461ed2222ccf757280e40cf1d4860e67bc35d5391ae5479d6b7282ea075f7ee56bf53d1","ssdeep":"3072:JNQdKgDRY2QEdOWASkVB09yzqr4hP7a/lR8A:IdKgDRHcDsbt/rh","tlshash":"18a312068bebe92f2e8715e71c34396bcc410b26cbb46ae657727d785e40764b04f21d","first_seen":"2023-04-11T10:20:42Z","last_seen":"2026-08-07T18:30:26.099752Z","times_seen":7923,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/favicon.ico","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9c-1e74\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1470\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgDIpBn9n3PP1MS7LZzuhbQT3W4QrGrZuoSikBg60Fk4vPg9Rs8EJS0kneNd0KUFKxSArq5KxC7YR5cClA9N%2B0P%2FQNhI0EW72u1qw0%2F1%2BS6IO4xeK1rW0J0glQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f80fa1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7796,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"9871e69b95beccfff5b48e42b0622f6a","sha1":"1a939c9602a3f18876132656476dfacf0a157830","sha256":"946d87d92b748df7666682fe022af7231c8aff8120572cfe322a80af0949ccd6","sha512":"20f23efc4606021e80987b8e3f291af140146931806e831fae6b3fad14b7e28c50d79c10831614ad3058fdf4cd47e580b6e17b2d5c32a3d176c434ac7a9c41f6","ssdeep":"192:vi5DEcWihLh3y7h8+wPHgOcaOWPv8UaxjJuz9N9v:wy8xxaxlsf9v","tlshash":"fef19d75cebea124d33944768d1174f7ba0c859684a36dcf7a360cae74f412875ce163","first_seen":"2024-08-19T17:15:34.860554Z","last_seen":"2026-08-03T10:59:23.307189Z","times_seen":119,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/sgho-banner.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /sgho-banner.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9c-929\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FMnWgz0i%2FPsq%2FG0hvHaSmYRjRCRxwfhWAvcDQVkBBim3%2FkjBkP0XnC3EiPbQlpytXzs0lpO2l9waDcLM1hl6%2BFFTSAIsDcee98X1oI324XrLiSMVTac10kEhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f35fc0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7c16e1d15df37e827ae211ccd2f1487","sha1":"af0153ede984e55bf2676a8ad4dfbed0e799ce34","sha256":"82a89da78ca60e63fdc126996bc4f2eaa614e9c8ad281e93541b6bcf5ce7010e","sha512":"6a5a768be8dc0c633e939d8ae1048e7d327ca97fee4a864e250e9ee15e3b69f00d6a599a5f32ad89dae403009dbe722e17d82bad3c3f79259a3518cc9b9dd7da","ssdeep":"","tlshash":"4d413559d254206fa84282f8d72780132b6f1ab5b701428ede6d472fd455cc3dce7aa4","first_seen":"2025-08-31T09:53:59.397444Z","last_seen":"2026-08-03T10:59:23.216589Z","times_seen":44,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/gho.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /gho.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGmM%2BsEj7zumdUp7AsAyI4YPOmmNAIfNx88n7ig4P50zQ%2BZ2NubZ3ERdbzJ2jA0s1krjHrMErphgJcDnOaWZC690dvzYpb6t2PwToM5nAbEPoPV6p5BmhyBXLg%3D%3D\"}]}\r\netag: W/\"69384ba0-358\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f37881b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":856,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b541cc9f994bd676b0d839b4cb858c7","sha1":"6f9f9268b497a8b202c8cb3a643171cd81ca4cd1","sha256":"359229ec1af95bd4436f9fdf2e73cf496012245c217b4b9c156fb486ac1f974b","sha512":"046064cd0eb75f4253922d81e683206f6cd812a9598c60dbf686784518802eac4d53d243e5ba810a36ff31775b20336fcc2c59e170d8a0aa98d7bf2ac87ed17b","ssdeep":"","tlshash":"b811ce3dc6396d6c000a87b853351521399ec4a5f33727b867b22bf22609abeec404fc","first_seen":"2025-08-31T09:53:59.392006Z","last_seen":"2026-08-03T10:59:23.312729Z","times_seen":38,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/pyusd.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /pyusd.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKGNHzsSd3Lg%2F%2FROhH214I%2FTcLpbL8%2FWB%2FxsRSy8X8y0H4U%2FzzUtYot1ALCRA9fWaSPFu0tPI2sHzDBngdXn7FHE2wkVtNEUq60%2B5sEcrYbMCpYzvltC9QfBTQ%3D%3D\"}]}\r\netag: W/\"69384b9e-3c5\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f37857b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":965,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2266417397f35a0a2b50774eec37900b","sha1":"3fd8e09742c777587b87ef38b9da17639598d96b","sha256":"f6f9853546cf576bfa28d047e66cf2fa688e5bdd5f2f85d4fa6a715820e752e5","sha512":"b06524dfdf056ef46a657842fcb8cb2b5ea6e976fb3813314b5c5137577b09a7c511c219008ec20965e4163ee71f7bdde52efa3ed232eb4eb16f60323257ff8b","ssdeep":"","tlshash":"2a11ebf916784e0c644a8bc5fe296014672e745cb11f4979e95c8f717443996fa23d04","first_seen":"2025-09-11T13:22:04.678397Z","last_seen":"2026-08-03T10:59:23.250242Z","times_seen":35,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ezeth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ezeth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcUJ1S9MVdTNTwQTkhPJNaFxguqc%2FKC3YdD2fS5yHnpZrJeY7vJmUnCYqQTVTrfRUUT19mIY76ZOcWu9Q8fe6MmnIEltnCD4SaIrGGZaCT6MHLUw3DyYzHxl8Q%3D%3D\"}]}\r\netag: W/\"69384b9e-247\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f37879b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df49eef123506f4d189f1f494397519a","sha1":"58b67ef3e61e25d815c711516407a934f0fef078","sha256":"949280a6aad97b0abe98eced4656d9bfc84ef24c5cb4c9e7584e8940a72eddc5","sha512":"9c9518577ae275ae96c104ac11a9d290acabb0f4f1becea325ae9f65f1645699c87637d159a3bf17e9c5af175a8067dec0d8c5ffa05777a66638a1560a025e2e","ssdeep":"","tlshash":"e9f081dab848336cdf444b7c829990a32037b0fc1a56029cf5f15a05f1c06bf9cb059e","first_seen":"2025-08-31T09:53:59.29445Z","last_seen":"2026-08-03T10:59:23.261297Z","times_seen":33,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/wbtc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /wbtc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba0-6e4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULyJVqvZoB5vKzvNvs0G7%2BgPvTOZ9R1xxTsOUh%2BqdQ9RbCXdXNQHWhIeeqmWhWFfls1wIhQYp3SUr1ngbCYemqu88tzc78C8vdmFr8%2BASTnD2ffasD7T2%2FQuWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f36815b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1764,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2b4e2117b1ec8ca0dcb871f495caf8a","sha1":"d5072511267fb921e2f4d0664c7f6abd5b88e878","sha256":"c658b6d04756322e844d3e224e3282adfa7ee61d77517527e0fa6f38c9404580","sha512":"b7ede8b6c41613eff43f51bc360f10d33a214ff32ab7b1703512921da895acdc129479c2c51f20a88b88441c8129993d7e9c9638792346a5cec2f96b66be4f87","ssdeep":"","tlshash":"2931a7d6233c51bcb1034b3dbf0e64e243ad20d575161e84e33dd6969483ae6fe12506","first_seen":"2025-12-05T17:13:19.998571Z","last_seen":"2026-08-03T10:59:23.188087Z","times_seen":11,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/sgho.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /sgho.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-8e6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ntVnHD9oNZVwis9yfR9Nx29U7Aly3GvpfvcXN1X9o7hSoHIOG%2BL9MghkYYqQoVDNLtewicHzAQBx6t5U%2Bu94CRihzacK3kUGeN4F8yAe6ASGSpMn83naJzRJ5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f35fcab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2278,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"036fb8665fc2281590437476f1da280c","sha1":"f6928fa71e3a01031c6301839189b5d7ea171f13","sha256":"da9472687f0d1313da1e7e69d7f3eaf684beff1e0b37384448b0db66fda45b27","sha512":"606f8b520b73b5328c69e68e987b15006ae5c8116213b7978d504e4db31b8593c346574aa67818fe136e3687c00703b56f6e6b24d7b90391c01820f7a7b67800","ssdeep":"","tlshash":"4541dc2de114246fc84247dcd7a29007215e03fb3d80c78eaae9cb3ef5d49d728a8b91","first_seen":"2025-08-31T09:53:59.216974Z","last_seen":"2026-08-03T10:59:23.185134Z","times_seen":49,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/usdt.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /usdt.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O27S2decVYz6gSqSg2ubp%2BJYVy8lDaO0Lx1lEqvYS1dtfTsM0HIEqHgklulLOqmHBS4YRmSwekUEKHdBT7PiHl9c1BpvSLvavRRKAxVfe3Ld8Wfr9CaqChBhdA%3D%3D\"}]}\r\netag: W/\"69384b9a-289\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f36803b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":649,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d7f5365b41a2cf5ea8a219e9efc1094","sha1":"c301d47e217a3b4fa1dea6812c2bf8056a8869a2","sha256":"849705dd5e7527ab36d853a0c55ee28696a6365705c5a3c5cd06e040b75f36d1","sha512":"62c0559e008e81d56732c1e7f5ada67190e61084097c8abc806485444aa4c63ca8f134734f886f530f1e9fd9c3e652353d79e990be8ae3355d4ced6b72885571","ssdeep":"","tlshash":"adf0d3da6630d5c04862ca7eef3f1f89286b20e7614d0686f07a6e0ef4430d5305509c","first_seen":"2024-02-12T17:23:36Z","last_seen":"2026-08-03T10:59:23.2546Z","times_seen":45,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/usde.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /usde.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b98-adf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqkviX95w5%2FDltnu8J6adI71F7ik5S1T6g8D2pvWpHyy7rKDlfyYcdSnpe9HwpFkORfl15GW7Zfs3BJC%2FQ%2FZplpF0dzBgykmN3TzqE2%2FV5DKMIGFsC1PA7oFMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f36831b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2783,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb101da6a893439f4fe306e5ff6a6d16","sha1":"23a174ac9e9952fd2127c94bb454eca8baec42cb","sha256":"09b0e070c9d0464ff7762dfc47da1831eeb41415975440d3e1f2fd06f78ac6b9","sha512":"09953d1e3eefb8438f539f367f8443c50345ef47f46a8fa19d2bd8c4b9e85ef149b64808f8d703c633c5204e4a156efbbe507002b1d66cf49d333f65c5db9531","ssdeep":"","tlshash":"7b5175ecceb490f9d805479fe7301445117ba1be9a81c618c4685f0f60e26af9c094e9","first_seen":"2025-08-31T09:53:59.416235Z","last_seen":"2026-08-03T10:59:23.238849Z","times_seen":37,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/1inch.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /1inch.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9c-1654\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSieixZBogokbWXHRPGvNE7mI8U7PVDieN5eh9Ph9klvnaOF7CfWmrDQo24VfNzHQQiByXVHJnWveoZSyItMmhUJn0d%2BrxLZKrk6IjhJrAUXGaFOwS6AFN0Psw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3a95ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc9bde4b201085921013a1f78cdadb30","sha1":"47807f58689407c86c2455608f18e63569f3e4bc","sha256":"08800ecaca10407b08db407de182b45f08febc28028bfc158945f4e1824d9d21","sha512":"c3536bcd16e48af6f4153d5f38f6eaaaba4ab1a1ce623ee1aed9871c993e6f1a89fc2399123e9b36db0d9d43c155bc0a59a492bd35faad115f3b6d179182b7d0","ssdeep":"96:UjjI2aF+gNq45e/YRIO74NsAE3tqTQHpD45evoqRWre4Q1IrdVfg:UjjIplNveNTNcVp05KoqRd4QCrdVfg","tlshash":"f2c1c069d384f3b8cc62c7b8893574b4ac8f54bed1e1a32c87a985b0b6614d852dc8dd","first_seen":"2023-12-08T00:02:56Z","last_seen":"2026-06-14T20:15:17.624798Z","times_seen":30,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/Inter-Medium.dc792b50.woff2","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /Inter-Medium.dc792b50.woff2 HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/0da2d62e1a58e826.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105924\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:42 GMT\r\npriority: u=4,i=?0\r\netag: \"69384ba6-19dc4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDfo52qc3pq%2F2y5kK%2B9vrD%2FHvpxa0HGWaN64o8tRkJHTirHMpltntoI2hqmo9KA%2F8q83ct9ZC1B%2F8wC5HAoX0JaUnSlm4s1JEPIq8NjUOjsCo8RYlhCoWaLMdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f73d6db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105924, version 1.0","md5":"75db5319e7e87c587019a5df08d7272c","sha1":"92b30527304b5dc80f45e997e0b1ac4c70110a18","sha256":"1b498b959e5b7decbf9185803591d25bc1fbf83e798372ed30d32d5c79d82ff6","sha512":"4e556d80b52ddbadddf9287f6cdaef0d12113d0fa4a07728fd67767b97806eba5fa0f82711f71e76ee2875192d7618a9b6c277ceb6d69a30f76ca8e3ebb74aa1","ssdeep":"3072:7Jk35GDAni+UzuVEjLH8MSP02J5E4ZjJffp:7ys0iIEjz8MNGRfp","tlshash":"3ca312f46132150feebafcb00b9354415488ea21d39746ebeb74a5a3644dcdb8ea06c3","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-07T20:03:57.741042Z","times_seen":10847,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/susde.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /susde.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-6bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RapKEuzmtZJrt7eTzMdiL2lAvWWXSiMRQzFRQjbneHfATbqkFeNQFreNdUt47y3a2eWNuOoGYxrpJoE8dVFBeyzeV851Gj1mDBAkK9f6U1uN84v8z88k8Hx3AQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f36824b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a14fdbe69158b834719cd8c83931cdcd","sha1":"4c115ec6ca72af7c2335c60dcaafa0d405504f1c","sha256":"a9a9962a8f28ba7776d2d061fd87d973f2a388a10692847e607499776b65ab50","sha512":"74cae89559a9be748743771d6d1f627357ee9bb762411b707af18cefaa02d113f2e4d14cd23406e3c3aff6e4757f21062a4c5411994a45ff18b3a9ec160ee33e","ssdeep":"","tlshash":"3c3162c16b34ae949bc007bfff1d32dd271e60f9b91d069012a8a814b9d3c9d7d09584","first_seen":"2025-08-31T09:53:59.25687Z","last_seen":"2026-08-03T10:59:23.279294Z","times_seen":36,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/rlusd.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /rlusd.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b98-83e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1grOJfAY0k40zET%2BuGZsoz4FeJO9GVfU%2BXyXCy8WZ9easohcTomusgIDx9hEYkhnIAyVD37gwLx4l10TWg%2BjDNLHvEirQ%2FZsEcECIt9aJseZVk4sBhB1Qy6aJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3683fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f4ef50562312109cf515e51e140e793","sha1":"f62a17a837a983147b35b23658671d7ea782ecdb","sha256":"b902fcf444cfa6a998143b3becd9237077ecd54f8afa7c3c530377ade4200a63","sha512":"4735d1aa0868b378f320c162082b52e296c831e5b2396c48241671bbb41dfe247f5677e92f4f6119f88066d936a202ef2e075b23995c69da85631173baa2d06e","ssdeep":"","tlshash":"2d4174e7537073b89cc35e8eff117cf8a99b607e59a6cac483bf96400583ac4e642854","first_seen":"2025-08-31T09:53:59.570118Z","last_seen":"2026-08-03T10:59:23.19516Z","times_seen":35,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/dai.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /dai.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a18t%2FkwndovAoBNN7TzHau1%2B%2F528NR6hMLYdumxIgNL%2BWAHpM4W0kC2i2XzdSKD7FxT9iCHuPHUyLY5SqGEhfqRKIHtrpTAHy2Z1hxFRrgUiD7B7r2KD7CUMAQ%3D%3D\"}]}\r\netag: W/\"69384b98-35e\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f38883b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cebba9857498c37859140e97c82bd8e3","sha1":"fb2fd5121c337ebd5efcde6695c2d48d84ceccc7","sha256":"d4cb3d2e6a7a39057f84f69d9675caf3d952a0e56b8bb6defbcac46bb1c3c469","sha512":"d0f0099d97ca7e70b488c868840501401012fd07bb45597fa90da82b1f4c57091f4dd989e9ce7346292ac58353c3672f404aa2485709bb4fb56041607c2b4726","ssdeep":"","tlshash":"6e1123b9d778f896c24783b1df1d6050033c11aa9403d398e89c1b6955522992f08130","first_seen":"2025-08-31T09:53:59.473125Z","last_seen":"2026-08-03T10:59:23.297819Z","times_seen":37,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/Inter-Regular.f1f0c35b.woff2","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /Inter-Regular.f1f0c35b.woff2 HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/0da2d62e1a58e826.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98868\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:42 GMT\r\npriority: u=4,i=?0\r\netag: \"69384ba6-18234\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9%2FMkVppLJsF6f%2FM657Wmpw%2FInn5gsiqItI6Lnhash1lYnzRtBS8Oeo9wL74sUyCizWEqHB9QyLVAZtzjxKl2xQ%2Bm6xIxJxOVfYPJDJqaOrl76ilFeKzlxwKXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f72d4cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-08-08T00:30:50.78405Z","times_seen":28055,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/usds.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /usds.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-493\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxGrUVeLWay%2BKqcs3WWOPHWtaVf%2BIqbiTsCMeLBCC0%2BojvVDMmJz6NnBfdx3WDXPt5xeBAmrVLnI6%2FfhAJrTWsq3345ffL0C9Apli6wJ74YpjA8LmfRSey2Vvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f388b1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1171,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab97f7c73b88f1a19054563ba7b0ff46","sha1":"61fbb08327e0c21f6a40f8a48bdec77f532eefee","sha256":"dce6222dfb19f439c617a199b15611025272ee0b2b0f600b736303fd61789c03","sha512":"fde16c9997539b2faf251ea006f3fbd872e70d5213c8cd4342dfd6175239f625bbf995730ad531ec563933f58a0b11192e3b89308f7ca3b0c5e97ba856e6aab2","ssdeep":"","tlshash":"9d21447cd20c69faf41a834ee9309854321e917a71538718c7fc4fbd10c2f292d196e9","first_seen":"2025-08-31T09:53:59.595368Z","last_seen":"2026-08-03T10:59:23.287176Z","times_seen":33,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/crvusd.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /crvusd.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba2-12546\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzYQypAVbIssL9KnhnZh3nYI3uggHMvGK3DAl%2Baw%2F%2Fu5qvpIXuz4ZT%2Fo1VgS6zYKn%2Frf%2Be%2BmZZvd1JH63BiwUIroHJOVa6bdGgmNCTigoEt6rSCL%2BHmeBrodwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3b982b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75078,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"592c6368f75c513a217d1df1f21c49c3","sha1":"d0254b4de4bd46f938e9df23488eb409972ba485","sha256":"84e42889e4de3c05af1b008775bc9da47656085fcff5dd3c0f9911379fda87e5","sha512":"9ad405d5c838afa26c7bff2034b9feeb2166aacc7ec9e4b22248a4525b959790a4681dbb4962c290f1f97b7a083a9e37373cc5f1c0892fffba7575c465acd769","ssdeep":"1536:6ggzfhUnvc/e/YwsLge6teMyN5jf2xYgrorSxT7gT5q/Hc:6gkfGnvc/3wjvteMe5jf2xYgrorSxT7s","tlshash":"9173ed69ecbc70265bea67c84d7e8652d1bda366830e456701fcd6c4020db2f778be48","first_seen":"2025-09-11T13:22:04.495762Z","last_seen":"2026-08-03T10:59:23.218921Z","times_seen":33,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/pteusde.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /pteusde.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba2-ab5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87FPs6eRSTymMC4VzM2lShDXfpr8SFAaiInPH%2B1znnB%2B1BasTsmYQNOdmn99n6sQ%2B%2FHpsI9cioelNmQOpHnXOta2yPqgj9Ejf%2Bd0dJ8EPHpNW4exXJbCXJSG2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3b9bab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2741,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"827e1969a81f071f52372dda4b21e52a","sha1":"db212201e3cbfc8c57d391683129b4766f4f5d92","sha256":"d2226c167d0413788a711d798090fd58f9dd8950dcdb5450def57f931ba5f577","sha512":"524cfa3752fce089c47a82a38d6d8f6e0c633e25e3060595bdeffde9e31393a3c2fc91a95f5b5a8188e1d1047706da25cd8d98bb0a1f0589f63502a9f6e56273","ssdeep":"","tlshash":"365152dae56ef378f38d87aeaf20e438221d10b67178c624da6d9e4e119180e85588d7","first_seen":"2025-09-11T13:22:04.663223Z","last_seen":"2026-06-14T20:15:17.598088Z","times_seen":30,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.aave.com/aave_180.png","fqdn":"app.aave.com","domain":"aave.com","tld":"com"},"ip":{"addr":"104.18.20.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.aave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 18:50:06 GMT","end":"Wed, 08 Apr 2026 19:50:02 GMT"},"fingerprint":{"sha1":"38:26:6D:2C:F9:FD:29:D7:08:32:41:25:CB:EB:80:B3:8D:33:D2:0C","sha256":"5F:1D:16:87:B6:BC:34:9C:F0:26:16:88:5A:52:14:87:C2:71:13:24:C9:01:83:16:1D:A8:F6:11:2E:DB:8D:DD"}}},"request":{"raw":"GET /aave_180.png HTTP/1.1\r\nHost: app.aave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 2929\r\ncf-ray: 9c3e83f84cd10b65-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1800\r\ncontent-disposition: inline; filename=\"aave_180.png\"\r\netag: \"76432638eabe23d49ea053f623626c1a\"\r\nlast-modified: Mon, 26 Jan 2026 06:11:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-matched-path: /aave_180.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ts24s-1769414834064-b4409ab928d6\r\ncf-cache-status: MISS\r\nexpires: Mon, 26 Jan 2026 08:37:14 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"76432638eabe23d49ea053f623626c1a","sha1":"9681ae5cd492e9d68782422d8ddb02bab4e680c0","sha256":"87f492dae5a16420d2f3ea2e69c17a8480ccf47be3e9ae3a792eb5bca7e4e41b","sha512":"ece7b3d87a305efe67fb9fde8403cc2cd455a7e089c4fd35bdf50ca832906ccc666a6227365a0d8a2bd9a00278fa78ea8b21f0c53b099f5b4ce818773c9b4dbb","ssdeep":"","tlshash":"2b511af0b2cd9618971366932c5d1205dcae9d0901bc62772af7970ba976f0144aa3f3","first_seen":"2025-02-15T20:05:52.793557Z","last_seen":"2026-08-03T10:59:23.277232Z","times_seen":85,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":132,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/secureproxy.php?e=jscdn/getFile","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:14.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://aave.com-wallet-cornect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"w6tnco8598xi02x1c5uu\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CneshMgpFMPOeYHvNkte6W%2FJVHC1FUaZ%2BJxyrYznuCQuxU0QH%2B3spUv3nqgODo9ou4ldoSCykNYCKifBdh4v1aHuyXJXI6bwWHk83XV55aM55CB3L4KXiCMbeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f9cc0eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3847828,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c47da69363e6922f85295de36d082daa","sha1":"e7442bd28b513b2787660861e7b6f237c0bb7778","sha256":"b973202bc51bf4f34ce688fbd6bc4c4af1e90a5da26fe39cc32c6c89e2aa7e51","sha512":"a4d76599d78c511c0515223e650da23129db39717444e3ea64d6952c68e92fb2aef31809960cdacf08040330c036b43fef411a8a2d3c06d1c7045d002ce5b2b5","ssdeep":"24576:2c2F9B0WqSUAeN2ukUnQb9Ggt59xgPLizrrfr/Iv/YjogmFV8/8Y2:2c2F8WhY2f7RxgPLiX/IoogmFN","tlshash":"372513c37983a082df0896a6f6f35c78d4c5981bd6c510b6ab44dd8730ade7b82d4ac7","first_seen":"2026-01-26T08:07:40.718387Z","last_seen":"2026-01-26T08:07:40.811221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1438,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1240,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ptsusde.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ptsusde.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b98-675\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFoLGjrP6G2jFJqb%2BbXq2kEdXtyESC4iTMNE8mzvwqbYqUdHMRa6IfCJEx9VgAu9jRwioDbov1Zc5vwHZ9PMvuGp%2BLGQjxmU5nhhkTdazcCYdHFpEvKPq7X0eA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3785fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a309b57a5584a75220c1585d6ecc5aa3","sha1":"6254ae6b8c0fe3e263878fe3c7833e9dd051be15","sha256":"d8ff9d0bde7e053a1569b04f706e7e10eb538938ccc95d8051040ba38d51728e","sha512":"df6c5b9e8858c2b6dcefc9a117e2bed61eb6288ae11a457a54a57348bb7dffe7456565b51ec59f8abfd233544a9454b4666f62f7d0cc3dd28be0f370be007bbe","ssdeep":"","tlshash":"eb3144d22724f7fc0586c72def3421a8b1afb4eca5662f84528e890465d778ef809059","first_seen":"2025-08-31T09:53:59.481982Z","last_seen":"2026-06-14T20:15:17.571661Z","times_seen":33,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/link.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /link.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QLT%2FRUPAKtCFdUZQVBXw1geZmBUEXmig5hqqpmLoWv9UETDLCBZvumbgW6%2B90pGd9pEKjCU%2FO6HIiulwRzQ3lvTVmiCeJIykuoePF%2BHQcp4VxDipRvXDI52Dg%3D%3D\"}]}\r\netag: W/\"69384b9e-226\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f37872b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3aea2b9fce86b0a82b2087a7ffb9c65c","sha1":"99571964611251006dc1d0d61044db74e8c53f81","sha256":"b83266aade4a1546c17d1e46a230b776ffc13d10e3d7281141d3973b2bf8bfc1","sha512":"a278ef2a7d1adecf9b6265a099b75bfde3c5f729a475194d904752980be6f36d638d7263c3684aad4877d9bb2b698b1567ceb398c83237e9e65124793266d107","ssdeep":"","tlshash":"a5f024dbf5e8336d094383e8733c7172347bc9e9300d04f8ca48a72c5ee2649a921ea1","first_seen":"2025-08-31T09:53:59.459232Z","last_seen":"2026-08-03T10:59:23.269567Z","times_seen":36,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/eusde.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /eusde.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9c-adf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fv8chIoGAu2%2BnI3afdpYQuHwAciZYUSjSfSzGHUSgrz167AbF177X2WMqP3BPtaoH7CeuzshAy7NHkWMYKuwhOp9i19IRlYqOtpY9xPYDuGU2ponTP2JmZtmGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3a92db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2783,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb101da6a893439f4fe306e5ff6a6d16","sha1":"23a174ac9e9952fd2127c94bb454eca8baec42cb","sha256":"09b0e070c9d0464ff7762dfc47da1831eeb41415975440d3e1f2fd06f78ac6b9","sha512":"09953d1e3eefb8438f539f367f8443c50345ef47f46a8fa19d2bd8c4b9e85ef149b64808f8d703c633c5204e4a156efbbe507002b1d66cf49d333f65c5db9531","ssdeep":"","tlshash":"7b5175ecceb490f9d805479fe7301445117ba1be9a81c618c4685f0f60e26af9c094e9","first_seen":"2025-08-31T09:53:59.416235Z","last_seen":"2026-08-03T10:59:23.238849Z","times_seen":37,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/aave-com-logo-header.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /aave-com-logo-header.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9e-603\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvs85pFxiq1BtbBKRYZocKbuZZaijA1tpG6KYdpzaCXl6Zg72TW1dUwnmtXcNoUTxv8otD%2BIcUNzGDJ8%2BohO2ENuQRvquTVs5CJfNFPvNppu6D0G07NrJb85EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f35fb2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43bd7162f501c198761c91e5b66afcc9","sha1":"88e64a60aca36599ac33c6d3e336b891925cb5ef","sha256":"e82105de6e30bc72de5dc35335354346c7452a71d8e9029bd160376fae01a5b7","sha512":"73c470cee93ea08e7ca55fcc46f0a7c38a013f7f08c01560dfc9af6f6d52492c35e8682e9424e0b5b89c52adad472088c79ef668f96f90516c23b33668e1e51a","ssdeep":"","tlshash":"3a31e3e6bb1519f801410ffcdf321bd9a6ebe4fdb361025ae53cdd58a4838da9c46844","first_seen":"2025-06-16T19:18:36.185329Z","last_seen":"2026-08-03T10:59:23.272413Z","times_seen":160,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/fbtc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /fbtc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:40 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba4-678ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhorHiN9XoGEnS8uJNh4mrdCbkLZWDRO9ngGqWouy8ylnW7AZMIybJwd13hAOdanjg9VReVONduGCwGHEmQ%2BoLf%2F1zvtiErVjpUk17rfze7ud3ZyYf%2FQlRAksg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f398d1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":424138,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"647cb429a3e5042eff49741f9f2ee7f5","sha1":"649f9dcf8417dd4161e3cbc4731fdcd5cd4305d2","sha256":"f420a63b121d64a77346fe4e8ae8db3dd2e73ef9529f01abcfcec274e94634c5","sha512":"1a30503fdde82e7f0d95cd939a99ccb402bb2c260990c5b53c42861d391470084b1925468b44e840fa104f7abdc84f35e40fa59a04243e8c86e7c29b1b37c9eb","ssdeep":"6144:zW1q57VgJZarSV+2QE7yH5vzhT5G5KL8G3wqXrM0GH78c8xAdoS75OZspo7KGpjJ:iHarSV+KyllTs5C1A0C88D75OZscjndf","tlshash":"35942307cea2b9b7c72e662ae04fbb05d791abd27139c4177b6471ea01f9e601c5183c","first_seen":"2025-10-05T23:00:42.057796Z","last_seen":"2026-08-03T10:59:23.323212Z","times_seen":26,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/xaut.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /xaut.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9b6GpoMjAtM6lT0rzjKEXRpLZdkUig1HOrkwzFMPczmvphbBMstluBTFgDqGECJP3EZ2gx2izwpOxN71Fq0yehnezHXsnUdmqxli7wlkAOlBMRyUHnX0cIR4sw%3D%3D\"}]}\r\netag: W/\"69384b9c-3ac\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f398ebb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d307b4e0664dc262805217fd6f5aade0","sha1":"4f977beaf4c5816b9ffda46e976d399b31a4a5cb","sha256":"0196ceea167d0304135af69c43738a97cba448f69256c23b65c606fbf52d4de3","sha512":"7dbff10fb5c6fc2cd246e52a55c5199e42fd3a0237bb49a7ef7495441723375bbdc9fa7d38c6cab060f46cb387ec8b4b339d7cbe088defe32b30cd0202129e9d","ssdeep":"","tlshash":"5611109dda4c5a3d1c4b03ec813514e035bb6449631c97d8e2624a72f00bfe262a409c","first_seen":"2025-09-11T13:22:04.680041Z","last_seen":"2026-08-03T10:59:23.318167Z","times_seen":28,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T08:07:12.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678 HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Jan 2026 18:45:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NszaQZmy0Y8j8e3WVXACqK1xLejG5zIszpiAD2STT0xNhHhFYYwYFr204OamiloA%2FZxzXqFy4p65wgWgyRmn7zIdH7Qo8uqWAj3eYVwgVPQbm92IB%2FufNEc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f19a04b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2011450,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bd96193827ea78e42a7570c8b371a9b1","sha1":"f0435450b8811179c8ed1f15416b1288598e4bbf","sha256":"0e9751a794ec54825d941beffcd94477290e4e97d0d5556201dda4b6011217fa","sha512":"c2900f129b0d23a4d991ef3cb50c5428cd8b0016b32fdde65d44b9bb30d22d79acdfe1edd388a6c6362bd1e221be2b2f2b04c49e8a267221bef09d26cf3bd0e3","ssdeep":"12288:DKS9mxwUEM7Vxcaye8jHqeNroUjDQUcoVsQAlcC0zIkMtwO0tQwg00hcoT4Y8IR5:lYxFyYxJ/","tlshash":"e125e09e8aa3041a3c13646857f79646b371f423e80dde6d3ecea108cf4f2d859d2766","first_seen":"2026-01-26T08:07:40.713543Z","last_seen":"2026-01-26T08:07:40.816394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":43,"dns":28,"connect":1,"send":0,"wait":77,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/weeth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /weeth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-ddd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LJq0YLF%2BWkqwHYZeojpAodIJce1TQzI6bHvZ1JyZhZodLaTY4P7%2FKbXLa54x1gSiASQXkUwW3TaXBdW80MGXR2LB1cDhDu%2FcBUugw9JGflwaYdIxeN%2FgM6fLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f35fe9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3549,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eb12eaedb18edbc08303520391ff701","sha1":"9d819203d52da4de2bc9eb9f6b55c4c34dd261e5","sha256":"cb4ef662fd4729e1d4b9aea8edfcea6d884cc708d94c8fbc04841d0f86e98c3f","sha512":"a528cbe92deae4d44fa9befbe387e13ec3961bd8158dedebedc9eca5d295bdf92cac617dd3bfda371a25b2c17b7a8d7a29c5b52ebec9258bf39ae6cc6693d7dc","ssdeep":"","tlshash":"da7131fcb57c46bde0ca436deb277ce8631d909f64114074c6be7a6c01669eac9076a0","first_seen":"2025-08-31T09:53:59.322153Z","last_seen":"2026-08-03T10:59:23.311922Z","times_seen":37,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/tbtc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /tbtc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDd98rovgIEms%2Fqc1qM05nmNh2JeBx5EzWZHIwh8hTcG1xglE8W2DiU4Qkt0ok24UlU%2FfNtEM%2FkxxfNytZmeT0wUiaKMk4wZvO%2BuXHHOhp7QqWmQusuKCZvkYg%3D%3D\"}]}\r\netag: W/\"69384b98-3bb\"\r\ncontent-encoding: br\r\ncf-ray: 9c3e83f38887b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7878925357d8799caab7b05114943d6","sha1":"5dd46a7f6a2af9f8298635f1502390616e7c5e97","sha256":"9d8f6b66f44aa6a0a1d5937e56012a2bfaf0190d028730b990e61f8f5c7b1813","sha512":"a8a8ff127654d1994f118baac05d96453cff6a584d507c47a3be9ab0c5601235bcf5ba42e0a1444002407c806dc79a95f39659fc0b5aae6e714e67ffdcff0b4d","ssdeep":"","tlshash":"b311edcf4264708869008af4ee2f2b5b573c7cd84a7e018e62ccb604b693a5ca940e04","first_seen":"2025-08-31T09:53:59.552681Z","last_seen":"2026-08-03T10:59:23.218017Z","times_seen":34,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/usdtb.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /usdtb.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:30 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9a-b30\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDbH8Ez6PyiXPQDgneOMVH2dzh8XEBLY%2BasSeWYeu9jktg380Fyq2EonA%2F7tmfxiKZCGrVfkae2i7aCwQ7zs3cmqhdhT2PwjmqwqH4DUDOzNYupGoi9IkRRmrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f388a1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2864,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f940271cb6f5188cee2d3f1595d2bcd","sha1":"a506992a0650bfa8f3c585796d03bd4e00e17c4c","sha256":"fd4d8ecec6aac0be943d790e4d1997812fc5a77f309d44ae110f780f2a68fbee","sha512":"6531a71aa64f57ed7e35b877e86fc90fbec8e1aa19edfd231125cac975e4597b5444fb21676b978aefdedbc48c093125834d72f59cba0a9eac44ea214eca538f","ssdeep":"","tlshash":"d051a6ecdb7891bdd984478fea3408a8226d829f4a61c305c1f49f1b56b95de5c094fc","first_seen":"2025-10-28T01:07:53.22196Z","last_seen":"2026-08-03T10:59:23.179816Z","times_seen":10,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/snx.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /snx.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba0-4ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0FmI%2B8cuIhvIle3o%2BErq%2F8D0ixn3Tj64ViwxqhQ3ZLb3j2t1yHvQk0wUMD2ByTinkSw1LHM1eJNb4d07tUPxJlhOdgRPgGsU0WG8162s8w9TeyHsDCjL4b9PA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f3b991b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7fd141ac9ce9cd5d716e7f35308e6e3","sha1":"13d5d11d022f8cdeee2089fcd27d77a5f45a2182","sha256":"b03cd801e3d60cb90541f156e398c9dde6c64f014f78edf10225766c6143fd15","sha512":"03f030d1cd76f46b2e8616ebc88cf2bf60cbf125dff11ea66215a089cd02a4837c7116fd30d16329cd30380f3efbdc59901e0507f0ce21959e3a7e4e6fd171cf","ssdeep":"","tlshash":"5f2162ff776cea9d5053d3d99b72e470032c602f352bc2e0aa5c5d34540788ce503a50","first_seen":"2025-09-11T13:22:04.683309Z","last_seen":"2026-06-14T20:15:17.60922Z","times_seen":30,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/Inter-SemiBold.fcb100c7.woff2","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /Inter-SemiBold.fcb100c7.woff2 HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/0da2d62e1a58e826.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105804\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:40 GMT\r\npriority: u=4,i=?0\r\netag: \"69384ba4-19d4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ex3NxZmeqZDk8XQY1ebR5nqYmV34QwrgX1W9tgUit1IO2lR7nSijOMuURm7OrWjyKRVWbeLq6VuSBCkS5dvgrAdFA8OE1n%2B8MHv8vk3PTzCSZZr0ySElgn1vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f73d51b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105804, version 1.0","md5":"007ad31a53f4ab3f58ee74f2308482ce","sha1":"dfa9f8f3d79bf8a0001fe72eeadad0490cba59cc","sha256":"152261291c938aa5aad6a56d52b47ffcb893d1c0387e76d7f270a7382ff786d5","sha512":"48aef263aca876ba4db5a596fbb8332524d6b440a8a516e1baa7899f2f1da0e1c44452d0380869ec455d27a6e0b931210b1fb669b36e36914ca27235f34e8558","ssdeep":"3072:wo/8sikhizn8CQRxZ9UXsfH0K1yjewt8G5VYqLS8b:a5z3iHCAHjaJtZ5dLS8b","tlshash":"6fa312cab961eaecd2b1d42806545efaacf3eff0c1e315225697014898accd35ed4f84","first_seen":"2023-04-12T20:55:47Z","last_seen":"2026-08-08T00:30:50.79814Z","times_seen":20269,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/solid-10.1.0.min.js","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /solid-10.1.0.min.js HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Jan 2026 18:39:46 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"696fcbf2-12a32\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP5zxjXb8R5ZS3ixJVjZe4TuUXuQLMjZ6S8HjE%2B01KwVZGA6R1CP7e2EplyA6mlPjshOT1SFOLWImuQ3PBswCm8axdiBlh0%2BCVkVVMFXuHARjgzqrWL6zwB%2Bfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f34fa8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76338,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"184602927e465f18e27cc8809f2c2ab8","sha1":"9b1a95970347e90d32ceea1e4ada08f50fb455e5","sha256":"a868a9e4a58b50e9f7f4bc3c8701ad135e04bd18fb9c79acefea6025e2dcaca2","sha512":"a59d2e2881083e7d4c1ade2d4fe256f14eb3f2c66906933aba66a723c5c764ef74e0be485b3be7b8b1ce27549c1fc2e23302f513e2c4cae787aa106be51c0d54","ssdeep":"768:bEubGcW+9kDU/aP/0H4Ma1pnOcg4ma91C7NWU8IckacFcW3DW9Cvi5LQ66cxKKuN:99kAu8HFcnOcgm1C7NWEr6GxzZ9Me","tlshash":"3e73b6d6a64ae0d65e2150cee477f808e0684d93cdacf153e26cddcab45ef228857237","first_seen":"2026-01-26T08:07:40.681609Z","last_seen":"2026-01-26T08:07:40.82364Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/ebtc.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /ebtc.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:36 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384ba0-4b5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfECIIYQk5EwZIkXmUPf9RJeoMvSa7gdAiJ53tOajM44zW3TDT%2B%2B%2BzlXHz%2F5Rpd7OcWNIakArhhkkTyEJh9y6yFTXU67L5%2FmQB05oe3KsFe3mLFI77YEZaKhIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f388abb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1205,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"845665bd584ce7f5db747d4da8a5612c","sha1":"81a8a062c732d2caefb1ad15f60e2ea5e56ff7f1","sha256":"a7f704f24b04e7505f231607ffe277a51fc39e5919558d35b6e701f60b28eb7d","sha512":"d3d2067ce6c99cd558d9f2beafbcba293d9ed2298d288fb4bd5adcb12c7283ba5d8ced9b3031ed9db090960b1aee1703c634f9636a08cdf22275e772e33c33dd","ssdeep":"","tlshash":"6a210fe5e30d243de14c82feeb34ee71622e60aa53410795c90c5f2911264af6879a64","first_seen":"2025-08-31T09:53:59.304744Z","last_seen":"2026-08-03T10:59:23.288067Z","times_seen":34,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aave.com-wallet-cornect.com/teth.svg","fqdn":"aave.com-wallet-cornect.com","domain":"com-wallet-cornect.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678","date":"2026-01-26T08:07:13.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-wallet-cornect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:00:48 GMT","end":"Tue, 21 Apr 2026 08:59:39 GMT"},"fingerprint":{"sha1":"FD:F7:55:99:76:8F:71:29:D7:9F:E8:C8:48:EC:4F:04:80:AD:6F:B7","sha256":"AD:13:85:02:72:53:3B:06:D9:C1:31:1B:A6:BC:32:00:4A:2E:B6:90:60:20:C0:59:EF:F8:58:32:C3:AE:24:69"}}},"request":{"raw":"GET /teth.svg HTTP/1.1\r\nHost: aave.com-wallet-cornect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aave.com-wallet-cornect.com/connect.html?_subid=3vs1bj0.cf.556r76\u0026_token=1e68cjb1vtslqg.1769150771.1.71fd899dabf3a65eac676f3a269a4678\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 08:07:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Dec 2025 16:17:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69384b9c-6da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5POiC%2FseKJQnDDxfB5lz8CxH23s%2F9rhq%2FjJIWSS%2BXmcZHB1Rmozk0mXuGHH9fwd0u8GT%2BDhUnM%2FQpvsTXdgqYRmCJFaMDFdF6mM%2F0l4WpOB388TLVYhjcEjWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e83f398e7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d41d1538baaf2207b8ebf1c3a3eb779","sha1":"c8b77b2a8f8b3550f211dbf7d0cb3bbbce9134d5","sha256":"6175f51dfc670a1532a8eb98d01a7ed2ba5d3a71ef810f3900f291768efb7ea3","sha512":"7e5f35ce55fc18ce89cee34d268e13335b2818d2a117593701d2793305d22bdb50873e2e3c044cfc2c7340832a3ca46f58238b9feffe6f04ee400be0e99659f8","ssdeep":"","tlshash":"4331ce29d92f3d63f13783f4c9a0ad6702ea02c7b264879191306b3d3528a92884f7f4","first_seen":"2025-09-11T13:22:04.505005Z","last_seen":"2026-08-03T10:59:23.270644Z","times_seen":33,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"aave.com-wallet-cornect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
