{"report_id":"25c16e09-9c08-4c6d-8493-129feee48888","version":0,"status":"done","tags":[],"date":"2026-10-13T13:40:32Z","url":{"schema":"https","addr":"ethenawallet.net/","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"ethenawallet.net/","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"title":"Ethena Wallet | Desktop Wallet for Windows, macOS \u0026 Linux","dom":{"size":30950,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30871)","md5":"830bcf60c643c058b31490fedabf6a5d","sha1":"43c1310e2b40abbaf148b4962054633f409b8ddd","sha256":"06c585176b3a87dc22572f5ad97a2564c8c3be818b8c14dcdfe22a9c991bcc4d","sha512":"1675c86955c1492e5a4f2da43e11ab1498f761e7b1581a962feb3089009aeaf6e59818b033c19593f5bebb6543f0981465297e8b96f508190fb40ab5467c9b75","ssdeep":"384:1AGCH8MNhVc90ARyCI3PiOCIGqKQP5yafVc9pVMWk/CQozb90r8afVc9phiXntCd:1A6kh4sCI36jXnYfqMLQ05fXtK","tlshash":"f5d2a573626a213b513706cce29763faa197524dd94a0128f3bc03d84bf6d89fc67587","dom_hash":"domhash2b4223bf3562650b0f20260c4fbde79c","first_seen":"2026-10-13T13:07:34.073502Z","last_seen":"2026-10-13T13:40:34.599987Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ethenawallet.net/","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T13:40:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethenawallet.net","ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"domain_registered":"2026-09-26","domain_rank":0,"first_seen":"2026-10-13T13:07:29.847216Z","last_seen":"2026-10-13T13:07:29.847216Z","alert_count":11,"request_count":11,"received_data":373978,"sent_data":5314,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google PageSpeed:1","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]}]},{"fqdn":"sysmon.powerroid.com","ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T08:07:14.201315Z","last_seen":"2026-10-13T13:00:31.527308Z","alert_count":0,"request_count":1,"received_data":37996,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethenawallet.net/config.js","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e133835aec7d1906d387abd7557b2923","sha1":"933f97660cd1f57c6d29c94c9f4840169b536aa9","sha256":"23c2f91607cfc06bd57ee5b2dabf9fc232f8fcb96c3fc291cd8727f8fb69d476","sha512":"716b49433b992ef3cfc5748fab80a3171ecca2f4440e76fda1416cf4e8c00b7d32180531bddfbbb32d1f47aab277ac429c981cf8311677df147c94654f5a4599","ssdeep":"","tlshash":"bcc04c460408e9af563e27969307660873fb178183d2471447302264a7e771b90945c9","size":146,"data":"","first_seen":"2026-10-13T13:07:34.127872Z","last_seen":"2026-10-13T13:40:34.608034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/seo-meta.js","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e0d98815a49a62d6a7949e217a99c4b","sha1":"75c8b3b851d67a58da85f2f23e5bca407b8f1df5","sha256":"9500787e2cfcfb97a5b36a8017e63866de493745ea796fd29f9e2f321f8658ec","sha512":"444a87ffc285bff7eb5cbd4d54b24e7aaca75f401c8a5279859403f808c7cbfe4d27dd715a613f9ec75094499467d390bd0ebbb40de504cd3dc9752bee9ca594","ssdeep":"96:4i3HkRuofXPoDxA2FbIag6QKSJDJwRYICLWVaI+iTevTWFTFihOx9MppLwcSpNBn:4i0RuppEedm+hCBDLWlF4PCz","tlshash":"3ee175039b24b770036b125928ea1af793761b1c62c294bc4cd7816c6291eefc137bb7","size":7409,"data":"","first_seen":"2026-10-13T13:07:34.087502Z","last_seen":"2026-10-13T13:40:34.604017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/app.js","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6a8d7b3d2d601382a88cddf2012c3a8","sha1":"7e8bdb99de481fa2ef1192bd9402c90d822f02fd","sha256":"cb99f0e68759623ebc24c22a35c8646a7faf1d2e0faa4b94e53afc117823df9b","sha512":"c11d378b9fbebebba703cab59382763dd88d82d28f353aac034170c8cb23191208acdc8d5bc5ab5a442a7dad4041bc72b9996d92a8a07415da84d94724311e63","ssdeep":"1536:0tWgBct6OVjKiIIzvp9z91f5dHtMDSk6igUSMuZ9bdbw0I6FPg7E37KwroRJ6tYd:0051mqzvDz7k6B9bCzuzLHroEEV+9OH","tlshash":"40c3187ba2567336013704d7b0ab13e6b3aaa60ce24740a8d6bc839c17f5c54f53799b","size":122147,"data":"","first_seen":"2026-10-13T13:07:34.103119Z","last_seen":"2026-10-13T13:40:34.608646Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysmon.powerroid.com/assets.min.js","fqdn":"sysmon.powerroid.com","domain":"powerroid.com","tld":"com"},"ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"41c91ead5ada61d387550c31546a6f6c","sha1":"654ba3ec969e77c666be3422050a79323dfc33df","sha256":"ba99e9377d9fa33ee713a2a697db562ea8bea0a14e3814b17dee06753b4b833f","sha512":"7928f36c8eaac3c68e65ce8326138a94fbb14d17b259216c7d994ef64745844a851ac58c2a1f6c4147c04472cff1aa9e55dfe2212c532777cb1248b942b9ab93","ssdeep":"768:3q6bmhgx0Yur1ik+ccexNPJ1M0fHkUGzwUg6ZWOMy9oGFuKdpLj:3F6Yur1bFop/","tlshash":"14f218ae2cd3203165b3a23a536ba202b33bc0531189d990bd9d8b156f6596503befdd","size":36943,"data":"","first_seen":"2026-10-13T13:00:39.567281Z","last_seen":"2026-10-13T13:40:34.609268Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethenawallet.net/logos/usde.svg","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.053Z","timestamp":1791898802053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /logos/usde.svg HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 25 Sep 2026 15:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab68f8e-d2c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3372,"size_decoded":1754,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64d1e7adc676b048ef9f9770ab40dff8","sha1":"98e01535b15675bb3c24243fe22c73b9a5322b79","sha256":"42d65f9b6db6184cd18bf1bf6679dbc5f231d47dde82b4e15d3791138f54d1b5","sha512":"40ab13cc7847355e2d3b9b944b694c6e8cad8b26c83d52c8013626c9212d1228b2e2ffb9b96a6da9463548df8a2badeb04a7f96db5f23e69edf2dc438ac4f855","ssdeep":"","tlshash":"0a6152ed3f3448d0da4c82fbbf0080ad306b55b789d18954c2d4ef1e18149aabc1eae4","first_seen":"2025-01-03T11:21:37.331103Z","last_seen":"2026-10-13T13:40:34.601331Z","times_seen":208,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T13:40:01.492Z","timestamp":1791898801492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/html\r\netag: W/\"6ab852ad-6b8e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ndate: Tue, 13 Oct 2026 13:40:01 GMT\r\nx-page-speed: 1\r\ncache-control: max-age=0, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google PageSpeed:1","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27534,"size_decoded":6749,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27475)","md5":"67d878ec72429bf58943cbb595f9af7d","sha1":"023b6e7c89aa95d588a761256abd9c581bfd52f1","sha256":"81fce0e3e871bea10684dd50962532204ffd91b91b5cd592b5f9126c215940b5","sha512":"eca8a243e788341e16c68852864702ece3e2d851c68a39bb39737ca5dca4ab9fe66ee49f73172e65ad3c671c7fc563b8234c500c124abfdbd5739ef416cfc069","ssdeep":"384:WAGCicM4DTUyCI3giOCIGqKQP5fxcbiW5/Ckozb90r8xch7Xp:WAhxXdCI3hjXnCiiGC0SEp","tlshash":"3bc2a7736256213b113306c8e26b63f9a197524dd9460128f3bd03d84bfad8afc77987","first_seen":"2026-10-13T13:07:34.084457Z","last_seen":"2026-10-13T13:40:34.602096Z","times_seen":2,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":70,"connect":26,"send":0,"wait":46,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/style.css","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.031Z","timestamp":1791898802031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-original-content-length: 196571\r\netag: W/\"PSA-aj-72y9FYTy6J\"\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\nexpires: Tue, 23 Sep 2036 22:55:24 GMT\r\ncache-control: max-age=313924521\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193714,"size_decoded":34401,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"ef6cbd1584f2e89bf48f3d32ccf3a4e2","sha1":"9372969f2830c01c3e672242939500fd38bd3883","sha256":"2f5e4d4b7d80a0d3ea095f317087d11e994ac29bca3510b48b254322d1de4ab7","sha512":"326dba0899d81313f45aae68e3e99c5b1f25d7f715d908af34009992ff40aa0beae9ec7125e8d35500db11b24158bacc78fcbff5d057620083be15b8f78b5d3a","ssdeep":"1536:9ucKnTgAj40dkm203t/x69phtcsZ82h2U7FgJQwpRDLzJTtVaQihzS5eO3:oj7vt/x69pLcsuTQwpRDLzkQiwt3","tlshash":"ed148833b7182539b07bd85ae481a7dfb1009a13d23343feed91a669c5d94b31b32789","first_seen":"2026-10-13T13:07:34.123699Z","last_seen":"2026-10-13T13:40:34.602867Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/seo-meta.js","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.035Z","timestamp":1791898802035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /seo-meta.js HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-original-content-length: 7412\r\netag: W/\"PSA-aj-Pg2YgVpJpi\"\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\nexpires: Tue, 23 Sep 2036 22:55:24 GMT\r\ncache-control: max-age=313924521\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7409,"size_decoded":2248,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7409), with no line terminators","md5":"3e0d98815a49a62d6a7949e217a99c4b","sha1":"75c8b3b851d67a58da85f2f23e5bca407b8f1df5","sha256":"9500787e2cfcfb97a5b36a8017e63866de493745ea796fd29f9e2f321f8658ec","sha512":"444a87ffc285bff7eb5cbd4d54b24e7aaca75f401c8a5279859403f808c7cbfe4d27dd715a613f9ec75094499467d390bd0ebbb40de504cd3dc9752bee9ca594","ssdeep":"96:4i3HkRuofXPoDxA2FbIag6QKSJDJwRYICLWVaI+iTevTWFTFihOx9MppLwcSpNBn:4i0RuppEedm+hCBDLWlF4PCz","tlshash":"3ee175039b24b770036b125928ea1af793761b1c62c294bc4cd7816c6291eefc137bb7","first_seen":"2026-10-13T13:07:34.087502Z","last_seen":"2026-10-13T13:40:34.604017Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/logos/susde.svg","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.054Z","timestamp":1791898802054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /logos/susde.svg HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 25 Sep 2026 15:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab68f8e-d38\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3384,"size_decoded":1769,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c890b3031b31bfdaac90bdda0ef37b5","sha1":"6a10f8b105dbca423b65975e101ae9b61205afec","sha256":"93a91b8f8f791169d7caa9c79f83f06a6f5b7f891ff55ad6584bffb457a47ec4","sha512":"a814900f82d73fb7465068e874ad1208a5fe19b3735627f9ac14a720d3acc45b4d6cd51855f6e8b4bd59e8518a14c2c3b0d6a86d8910849b9a93d23435c1e206","ssdeep":"","tlshash":"386154ed3f744ce4dd8c82e7ef15916d302b99b789c18504c2d4af4e08549aa7c1dae5","first_seen":"2025-05-01T12:38:59.312802Z","last_seen":"2026-10-13T13:40:34.605041Z","times_seen":202,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/logos/ethena.svg","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.051Z","timestamp":1791898802051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /logos/ethena.svg HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 25 Sep 2026 15:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab68f8e-588\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1416,"size_decoded":928,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b874b896b696b552a73c09bd1af9c13","sha1":"502114013ec0171a1de6de22d87ee3d96c5f15c4","sha256":"29bb9d087bc319c44c1644ba3271344ed1bae59dcd27f8d8cfad4a67377cf315","sha512":"4fccf1cdf4c3bf081f1aa41f33142131f5f4fd6e32e0c06eb68f2748b957f10ac48028c1b36cf3e5aa70b00897470b24786571a9de3fc16ac41dd1202781d3e3","ssdeep":"","tlshash":"27215265a23ee462f308c38dcb51b424532de6a587c58284d6c0bf4fa87d4c62c163da","first_seen":"2026-05-29T10:59:56.813152Z","last_seen":"2026-10-13T13:40:34.60604Z","times_seen":11,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/apple-touch-icon.png?v=2","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.745Z","timestamp":1791898802745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /apple-touch-icon.png?v=2 HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-original-content-length: 11362\r\netag: W/\"PSA-aj-vEwGlygRX-\"\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\nexpires: Wed, 24 Sep 2036 00:13:08 GMT\r\ncache-control: max-age=313929185\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8016,"size_decoded":8347,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"bc4c069728115fe716268d679da30e3e","sha1":"9a2881ffac81a1c3ebbca8685888700346a7cbe9","sha256":"c4ee0112b8520932cb59b70d946d454fed25ebd3ac088a0202bdc76117554fcf","sha512":"e570bb54702186cd54e57e4a95f93f39cac6bb9e1cf68f9269ec05c599d2257ce74198d4c13f1cc691a8fd10e33cef31d410edbd4123f63a1c68b07e423f23df","ssdeep":"192:q4YghamqUnlpPPzw+DIzKYRWJisH/wZfjSZTZniwrUe:aPUHzAvsHEf3q","tlshash":"b5f19e698059940e722094ac5296d2a0962a88cc1da377779b8fdc72c2e2fdb7c40f27","first_seen":"2026-10-13T13:07:34.081504Z","last_seen":"2026-10-13T13:40:34.606691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/favicon-16x16.png?v=2","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.747Z","timestamp":1791898802747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /favicon-16x16.png?v=2 HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-original-content-length: 649\r\netag: W/\"PSA-aj-c-Th19zAhk\"\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\nexpires: Wed, 24 Sep 2036 00:13:01 GMT\r\ncache-control: max-age=313929178\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":645,"size_decoded":955,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"73e4e1d7dcc0864d5ecfc8469c23835f","sha1":"5d63f494a28018afb67393ae94be7517654420c9","sha256":"9e059d68a638526dd29c7fddcbbc699a9b7995bb1e5a70770e7a8259df259842","sha512":"e51105a9c8ab8d91c35f5bfc7b0485b896e38bc07ebf2a0e09e57a9d6b32f3751976045693c241c16e1dd7bc98e28958a351c3499480f5576aae677c0de5024e","ssdeep":"","tlshash":"38f068b704056d7fc8892f28c3744c594d7711d147654149b534701185c7bd1f9e854c","first_seen":"2026-10-13T13:07:34.122149Z","last_seen":"2026-10-13T13:40:34.607352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/config.js","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.033Z","timestamp":1791898802033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-original-content-length: 152\r\netag: W/\"PSA-aj-4TODWux9GQ\"\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\nexpires: Tue, 23 Sep 2036 22:55:24 GMT\r\ncache-control: max-age=313924521\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":416,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e133835aec7d1906d387abd7557b2923","sha1":"933f97660cd1f57c6d29c94c9f4840169b536aa9","sha256":"23c2f91607cfc06bd57ee5b2dabf9fc232f8fcb96c3fc291cd8727f8fb69d476","sha512":"716b49433b992ef3cfc5748fab80a3171ecca2f4440e76fda1416cf4e8c00b7d32180531bddfbbb32d1f47aab277ac429c981cf8311677df147c94654f5a4599","ssdeep":"","tlshash":"bcc04c460408e9af563e27969307660873fb178183d2471447302264a7e771b90945c9","first_seen":"2026-10-13T13:07:34.127872Z","last_seen":"2026-10-13T13:40:34.608034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/app.js","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.036Z","timestamp":1791898802036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6ab85aa2-1dd25\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\naccess-control-allow-origin: *\r\ndate: Sat, 26 Sep 2026 22:55:24 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122149,"size_decoded":33690,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (5913), with CRLF line terminators","md5":"c6a8d7b3d2d601382a88cddf2012c3a8","sha1":"7e8bdb99de481fa2ef1192bd9402c90d822f02fd","sha256":"cb99f0e68759623ebc24c22a35c8646a7faf1d2e0faa4b94e53afc117823df9b","sha512":"c11d378b9fbebebba703cab59382763dd88d82d28f353aac034170c8cb23191208acdc8d5bc5ab5a442a7dad4041bc72b9996d92a8a07415da84d94724311e63","ssdeep":"1536:0tWgBct6OVjKiIIzvp9z91f5dHtMDSk6igUSMuZ9bdbw0I6FPg7E37KwroRJ6tYd:0051mqzvDz7k6B9bCzuzLHroEEV+9OH","tlshash":"40c3187ba2567336013704d7b0ab13e6b3aaa60ce24740a8d6bc839c17f5c54f53799b","first_seen":"2026-10-13T13:07:34.103119Z","last_seen":"2026-10-13T13:40:34.608646Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sysmon.powerroid.com/assets.min.js","fqdn":"sysmon.powerroid.com","domain":"powerroid.com","tld":"com"},"ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.043Z","timestamp":1791898802043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sysmon.powerroid.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 19:38:45 GMT","end":"Sun, 10 Jan 2027 19:38:44 GMT"},"fingerprint":{"sha1":"33:B6:A9:F9:7A:88:09:90:82:34:89:F4:6E:12:A1:25:5B:52:D8:89","sha256":"94:BC:4B:43:6B:95:7E:4E:B7:76:E8:89:0F:C1:34:B3:D9:D2:7A:4D:CF:8A:E5:8E:58:18:C2:C9:0A:B0:E5:06"}}},"request":{"raw":"GET /assets.min.js HTTP/1.1\r\nHost: sysmon.powerroid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-request-id: cff2f9cb\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), midi=(), autoplay=(), display-capture=(), publickey-credentials-get=(self)\r\ncross-origin-opener-policy: same-origin\r\nx-xss-protection: 0\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Mon, 12 Oct 2026 21:50:33 GMT\r\netag: W/\"9056-1a132189028-gzip\"\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 13093\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36950,"size_decoded":14139,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10031)","md5":"41c91ead5ada61d387550c31546a6f6c","sha1":"654ba3ec969e77c666be3422050a79323dfc33df","sha256":"ba99e9377d9fa33ee713a2a697db562ea8bea0a14e3814b17dee06753b4b833f","sha512":"7928f36c8eaac3c68e65ce8326138a94fbb14d17b259216c7d994ef64745844a851ac58c2a1f6c4147c04472cff1aa9e55dfe2212c532777cb1248b942b9ab93","ssdeep":"768:3q6bmhgx0Yur1ik+ccexNPJ1M0fHkUGzwUg6ZWOMy9oGFuKdpLj:3F6Yur1bFop/","tlshash":"14f218ae2cd3203165b3a23a536ba202b33bc0531189d990bd9d8b156f6596503befdd","first_seen":"2026-10-13T13:00:39.567281Z","last_seen":"2026-10-13T13:40:34.609268Z","times_seen":3,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":116,"connect":24,"send":0,"wait":329,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethenawallet.net/logos/ena.svg","fqdn":"ethenawallet.net","domain":"ethenawallet.net","tld":"net"},"ip":{"addr":"143.246.219.25","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethenawallet.net/","date":"2026-10-13T13:40:02.056Z","timestamp":1791898802056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethenawallet.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 21:56:51 GMT","end":"Fri, 25 Dec 2026 21:56:50 GMT"},"fingerprint":{"sha1":"43:66:0A:BC:E2:24:AF:F7:6B:3E:25:DB:EC:13:7E:B4:EE:68:4E:78","sha256":"17:0B:63:36:19:03:CA:FC:68:D5:D2:86:BF:B7:8D:16:54:11:C8:08:15:33:85:0D:64:DB:D2:F0:B5:13:29:51"}}},"request":{"raw":"GET /logos/ena.svg HTTP/1.1\r\nHost: ethenawallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethenawallet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 13:40:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 25 Sep 2026 15:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab68f8e-935\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2357,"size_decoded":1218,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a1eb382044d5f5c680d3b51111cfebe","sha1":"87681a949ec742bd555135c75b5c3d9cf3462fd0","sha256":"4c793795f9aa50a7b1c98a12f5e05953983f1025b70619ddf563e7698721dfa5","sha512":"07e434d835ccf7305bd9c63a40a31bdee9615248c3df6537124123f68491f69d256cc06b1c85068246cf8ddf9e7e4df713366748f27acee6e08f857ae6ec70fa","ssdeep":"","tlshash":"01416279b28aa85de508c16cea54c9ba137c65b2b4510100ce9ebb2f8012dc7e93f7c9","first_seen":"2026-10-13T13:07:34.120524Z","last_seen":"2026-10-13T13:40:34.610122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ethenawallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}