{"report_id":"2f7194c2-949a-489c-ae47-a1711f6da86b","version":0,"status":"done","tags":[],"date":"2026-06-24T18:30:46Z","url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"title":"BackMyMoney — Refund","dom":{"size":13681,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (630)","md5":"13f01eea2b739ea86c176b4651f5dc4c","sha1":"1cfcb3ede2ccf0b8f3bf269609b2e41a8b8fa6de","sha256":"9249fb4d44d1e2d9ba7d1e510074a20ce14c8016d54f5db6037c3d9c2d2034d0","sha512":"b4fbd4ebe5dd6b017b6d3738de17cc737921b4390ebe11dcb9dae6cfc44ba07c824dcd9c8ea7978edcf00ff34646d4a563ea856a355dcd8d767346141d370bff","ssdeep":"192:/mRjxJ7gSug8puRwqLHJNfjbmnsCf5kyckNwkEsozgkiCBw:OR1J7OELLHTfXmnt5kTk6kDSgkHw","tlshash":"ce52722138f0dc72418381e57ba6ab1a7fd9d207e206554076fc4af51fe6d438a236ad","dom_hash":"domhash6c935ead903edd0d1cf5fc3ece75e8df","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T18:30:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"walletzon.bond","ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-06-24T18:30:47.514038Z","last_seen":"2026-06-24T18:30:47.514038Z","alert_count":13,"request_count":13,"received_data":503167,"sent_data":10023,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-21T22:30:18.963204Z","alert_count":0,"request_count":1,"received_data":424237,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":483,"comment":"","tags":null,"fingerprints":null},{"fqdn":"get.geojs.io","ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-06-19T07:32:15.653364Z","alert_count":0,"request_count":1,"received_data":983,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/utils.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","size":248044,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/script.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"040130114fe2a1d2b483441a081a349f","sha1":"3fa68c98fb75f150e3362c9c37d754c563f8e535","sha256":"c7e13efc5bc0e97b3ede8812d9d8348f9e19b85cf0da69d3bb1d14b1007fde1c","sha512":"4c503804c5124e7a0c442a08a39b4a52546e8c45a0f09b479fa73f79d15fd92c96b592e50e45f5682c17868417a22bf8a0a44d2f28e60977794d2d1e08d10e61","ssdeep":"","tlshash":"ef516635f1ae543e9fd133f390b16d5f543fc561b832809958eca82470d1c8adab5ac9","size":2875,"data":"","first_seen":"2026-01-28T01:32:20.540212Z","last_seen":"2026-07-04T03:35:56.589527Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"82a500b3f5b943f0ee03f7070927a202","sha1":"0fe7f26b1ac314fdb3adb6b2c7ad16cb695bd082","sha256":"f4eeaa404b125c05f976e1ea6cd53bf5bb0d9f17a0e14958be35de687de0fdf4","sha512":"9c24a8cec31bf502aaddc9d964d7c31d0caa0830246b5ebcc5af7ab777fa0be959eba1f5cbb1533682ef364b4fb1d6e9d8ca399bd2f82945adcb5ac17e252b9b","ssdeep":"","tlshash":"a4411f1e2966a8f62663663d9bffe218343111133041c8027e5c92240fe8c3b59b6ed9","size":2388,"data":"","first_seen":"2026-06-24T18:26:17.376167Z","last_seen":"2026-06-24T18:32:08.602875Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75e1e0fe4ff1dddfb19a36a25565ca75","sha1":"1b464012e9fd2d404c8a265247d7da467bc48632","sha256":"f8410002c1c099a0d7e0cafcf3f1bc329550d00f584b7593089373fe62c575a3","sha512":"4fd18583022e5c2b8b40554c73c029a2b963e4e912e6c8978bf035cf97b48e60a73879c762e54d0ad22da0f24f6f21b12c7c1da2fc70ff6670f1cd0fbba90f2d","ssdeep":"","tlshash":"dcc0809f348231743dfb34664a5e6188362107974541d1509c5554007ea4f9f563f9cd","size":174,"data":"","first_seen":"2026-06-24T18:26:17.377023Z","last_seen":"2026-06-24T18:32:08.603474Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18041004143","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb721d8c5bf92ff32ed600a422826992","sha1":"66008493f3026cbc01d4f86b39f5875d4a85c00c","sha256":"95232928a2ad2e3a315099f00501d747f19120dfc1495cf1da6211dd1681b723","sha512":"da3a54037d2939685f1ce184fb591ed239d9c8558b0aa4c7812a5dd6f3e39c81468ab116223dbfc6f601bb917a341c825f92d6793e1f179ecd5050a33e7a97df","ssdeep":"6144:eZbGNi3tdNeWdLl+uNcCcugI7yzhcJL+TXlnR:eZyk+dvK+zf","tlshash":"d49419cdb3da74625392f478903f018ba17a68e2b44cc899f186dcd42e7469a4277f7c","size":423587,"data":"","first_seen":"2026-06-24T18:30:50.606693Z","last_seen":"2026-06-24T18:30:50.606693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/intlTelInput.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","size":34655,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/form.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98b99a55b591910fad9f21c856ab59fe","sha1":"6f6dce103d49ca54e43223eb15a352f66ca3f277","sha256":"5292504042b79805abd4c731fdb3e407af53b92d08090a62705764d30a2c93cd","sha512":"cbff56087522f3907d6bd15c796dee823b76f960c78c1a0b41a71839eacbcbaf0fbcc41191b62774b0c84f25caf323b285baa73b978f46ea1ae9c230a8ca5a97","ssdeep":"","tlshash":"5a813369731e54ea5fe213e6f0f95e02989de1627cb401a528bc062e10e2da4af10bdc","size":4002,"data":"","first_seen":"2026-01-28T01:32:20.542605Z","last_seen":"2026-07-04T03:35:56.594112Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"82a500b3f5b943f0ee03f7070927a202","sha1":"0fe7f26b1ac314fdb3adb6b2c7ad16cb695bd082","sha256":"f4eeaa404b125c05f976e1ea6cd53bf5bb0d9f17a0e14958be35de687de0fdf4","sha512":"9c24a8cec31bf502aaddc9d964d7c31d0caa0830246b5ebcc5af7ab777fa0be959eba1f5cbb1533682ef364b4fb1d6e9d8ca399bd2f82945adcb5ac17e252b9b","ssdeep":"","tlshash":"a4411f1e2966a8f62663663d9bffe218343111133041c8027e5c92240fe8c3b59b6ed9","size":2388,"data":"","first_seen":"2026-06-24T18:26:17.376167Z","last_seen":"2026-06-24T18:32:08.602875Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75e1e0fe4ff1dddfb19a36a25565ca75","sha1":"1b464012e9fd2d404c8a265247d7da467bc48632","sha256":"f8410002c1c099a0d7e0cafcf3f1bc329550d00f584b7593089373fe62c575a3","sha512":"4fd18583022e5c2b8b40554c73c029a2b963e4e912e6c8978bf035cf97b48e60a73879c762e54d0ad22da0f24f6f21b12c7c1da2fc70ff6670f1cd0fbba90f2d","ssdeep":"","tlshash":"dcc0809f348231743dfb34664a5e6188362107974541d1509c5554007ea4f9f563f9cd","size":174,"data":"","first_seen":"2026-06-24T18:26:17.377023Z","last_seen":"2026-06-24T18:32:08.603474Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/jquery-3.6.0.min.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","size":89138,"data":"","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-07-04T03:35:56.593505Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/jquery.maskedinput.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","size":4215,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/form.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.564Z","timestamp":1782325820564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/libs/form.js HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\ncontent-length: 4002\r\ncontent-type: application/javascript; charset=utf-8\r\netag: \"69c15630-fa2\"\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\nserver: nginx\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=31536000, public, no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4002,"size_decoded":4375,"mime_type":"application/javascript; charset=utf-8","magic":"Algol 68 source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"98b99a55b591910fad9f21c856ab59fe","sha1":"6f6dce103d49ca54e43223eb15a352f66ca3f277","sha256":"5292504042b79805abd4c731fdb3e407af53b92d08090a62705764d30a2c93cd","sha512":"cbff56087522f3907d6bd15c796dee823b76f960c78c1a0b41a71839eacbcbaf0fbcc41191b62774b0c84f25caf323b285baa73b978f46ea1ae9c230a8ca5a97","ssdeep":"","tlshash":"5a813369731e54ea5fe213e6f0f95e02989de1627cb401a528bc062e10e2da4af10bdc","first_seen":"2026-01-28T01:32:20.542605Z","last_seen":"2026-07-04T03:35:56.594112Z","times_seen":13,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/gtag/config.php","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:21.834Z","timestamp":1782325821834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/gtag/config.php HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://walletzon.bond/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g; pixel=null; clickid=null; aff=null\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69\r\nvia: 1.1 Caddy\r\nx-powered-by: PHP/8.4.19\r\ncontent-type: application/json\r\ndate: Wed, 24 Jun 2026 18:30:22 GMT\r\nserver: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":69,"size_decoded":260,"mime_type":"application/json","magic":"JSON text data","md5":"dda463f9407670c2a32682841811d035","sha1":"013b110e9d13a335183eb3ffabb749fadc1e60b7","sha256":"da1390fa9f56fa20da3d051b492d1c9711255825040786b9a22f44f250485829","sha512":"ff2b54563a9034450ca33190e2de49a48b29e6d0659cceabca53d55e3872581e2c3145a705b56dd32d401dd89ad9b7a8baade991a7cdaf215ba3839a564946fa","ssdeep":"","tlshash":"28a002fe3c689e12530a1753ae05393a956b1dc71fb5580d46e6094e43d5d01a26194b","first_seen":"2026-06-24T18:30:50.594561Z","last_seen":"2026-06-24T18:32:08.602178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/css/intlTelInput.min.css","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.556Z","timestamp":1782325820556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/css/intlTelInput.min.css HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23444\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\netag: \"69c15630-5b94\"\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\ncache-control: max-age=31536000, public, no-transform\r\ncontent-type: text/css\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23444,"size_decoded":23790,"mime_type":"text/css","magic":"ASCII text","md5":"741862fdc25b03dd477baf69c62189b3","sha1":"48038f2ce4782975de911a6ef9a47bc0b8d5aadd","sha256":"2ded612bbc1de8bc5015af6ca0cb6533ed079788cab6ee37887d15565e9cbde1","sha512":"56a8edacbcb6ffa643a56d9f64dc335e7bee4b70139785b7482021fde41c219d058412371d900732ff1f1f014ae71b0e49535fe2a40f771422acb5290a0fa382","ssdeep":"384:t1LFjFUZdoSW25WlOiAmuOoADkTzE2omlcPPP759:DFjFUZ1xAn","tlshash":"d7b261674bb27d24f96fd1e138a04662773f5c42f81e4a3fe2aa3d7d66410d034b2a91","first_seen":"2026-01-28T01:32:20.536973Z","last_seen":"2026-07-04T03:35:56.598184Z","times_seen":14,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/intlTelInput.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.561Z","timestamp":1782325820561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/libs/intlTelInput.js HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\ncontent-length: 34756\r\nserver: nginx\r\naccept-ranges: bytes\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\netag: \"69c15630-87c4\"\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=31536000, public, no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34756,"size_decoded":35131,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34020), with no line terminators","md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/utils.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.562Z","timestamp":1782325820562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/libs/utils.js HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, no-transform\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\ncontent-length: 248044\r\netag: \"69c15630-3c8ec\"\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\nvia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248044,"size_decoded":248421,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"resource_available":true,"data":null}},"time_used":1243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/script.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.565Z","timestamp":1782325820565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/script.js HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\nserver: nginx\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, no-transform\r\netag: \"69c15630-b3b\"\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvia: 1.1 Caddy\r\ncontent-length: 2875\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2875,"size_decoded":3248,"mime_type":"application/javascript; charset=utf-8","magic":"Generic INItialization configuration [i]","md5":"040130114fe2a1d2b483441a081a349f","sha1":"3fa68c98fb75f150e3362c9c37d754c563f8e535","sha256":"c7e13efc5bc0e97b3ede8812d9d8348f9e19b85cf0da69d3bb1d14b1007fde1c","sha512":"4c503804c5124e7a0c442a08a39b4a52546e8c45a0f09b479fa73f79d15fd92c96b592e50e45f5682c17868417a22bf8a0a44d2f28e60977794d2d1e08d10e61","ssdeep":"","tlshash":"ef516635f1ae543e9fd133f390b16d5f543fc561b832809958eca82470d1c8adab5ac9","first_seen":"2026-01-28T01:32:20.540212Z","last_seen":"2026-07-04T03:35:56.589527Z","times_seen":13,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/img/flags.png","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:22.037Z","timestamp":1782325822037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/img/flags.png HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/landers/yuz_ca_en_backmymoney_1053/css/intlTelInput.min.css\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g; pixel=null; clickid=null; aff=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 Caddy\r\ncontent-length: 70857\r\netag: \"69c15630-114c9\"\r\nserver: nginx\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\naccept-ranges: bytes\r\ndate: Wed, 24 Jun 2026 18:30:22 GMT\r\nexpires: Thu, 24 Jun 2027 18:30:22 GMT\r\ncache-control: max-age=31536000, public, no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70857,"size_decoded":71205,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-07-13T02:46:16.041231Z","times_seen":24865,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":766,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18041004143","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:22.163Z","timestamp":1782325822163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:11 GMT","end":"Mon, 31 Aug 2026 08:36:10 GMT"},"fingerprint":{"sha1":"0B:C5:65:06:DD:0F:AB:EB:1E:E7:97:52:C4:27:4E:58:4A:36:E4:7C","sha256":"0E:AA:42:5A:CD:B0:51:92:3F:AE:F6:35:E6:BB:66:30:A9:D3:23:7B:B0:56:D8:00:C7:B7:6C:67:06:C4:33:73"}}},"request":{"raw":"GET /gtag/js?id=AW-18041004143 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Jun 2026 18:30:22 GMT\r\nexpires: Wed, 24 Jun 2026 18:30:22 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 24 Jun 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 148142\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":423587,"size_decoded":148792,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5513)","md5":"bb721d8c5bf92ff32ed600a422826992","sha1":"66008493f3026cbc01d4f86b39f5875d4a85c00c","sha256":"95232928a2ad2e3a315099f00501d747f19120dfc1495cf1da6211dd1681b723","sha512":"da3a54037d2939685f1ce184fb591ed239d9c8558b0aa4c7812a5dd6f3e39c81468ab116223dbfc6f601bb917a341c825f92d6793e1f179ecd5050a33e7a97df","ssdeep":"6144:eZbGNi3tdNeWdLl+uNcCcugI7yzhcJL+TXlnR:eZyk+dvK+zf","tlshash":"d49419cdb3da74625392f478903f018ba17a68e2b44cc899f186dcd42e7469a4277f7c","first_seen":"2026-06-24T18:30:50.606693Z","last_seen":"2026-06-24T18:30:50.606693Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":41,"receive":45,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/css/style.css","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.555Z","timestamp":1782325820555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/css/style.css HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"69c15630-1b55\"\r\nserver: nginx\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\naccept-ranges: bytes\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\nvia: 1.1 Caddy\r\ncache-control: max-age=31536000, public, no-transform\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\ncontent-length: 6997\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6997,"size_decoded":7342,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c189a3c7878edbf3c7d7c612eb4b5588","sha1":"40ba71aa3b4e81a8b79ea4261ea956306655082a","sha256":"880c240b14805e36e46bcec5ae2e91611b579dd635e09a08d0be0069c8a9d250","sha512":"33c00f8e7bead912cadd62878f246e7949362ab232db00374f664045479cef461cba6e2e54f9ab075f47dc18a9fd1e7f967518539b7ccfffcd1c046cd6fb5fc3","ssdeep":"96:zRfrP2QT/lMG7LsP50G4Eprj4M9TZaZNwTmiGZR1xXJYt4nfLQ:p2M25prkCRmTLDf8","tlshash":"30e1762b27646c94b12af0dcef985fcb935e841b8d0d1f6f745861ac92cc0e89277a4c","first_seen":"2026-01-28T01:32:20.53604Z","last_seen":"2026-07-04T03:35:56.597597Z","times_seen":13,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/jquery.maskedinput.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.560Z","timestamp":1782325820560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/libs/jquery.maskedinput.js HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy\r\nserver: nginx\r\naccept-ranges: bytes\r\ncontent-length: 4215\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\netag: \"69c15630-1077\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=31536000, public, no-transform\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4215,"size_decoded":4589,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4215), with no line terminators","md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/img/logo.svg","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.571Z","timestamp":1782325820571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/img/logo.svg HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 721\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\nserver: nginx\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 Caddy\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=31536000, public, no-transform\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\netag: \"69c15630-2d1\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":721,"size_decoded":1069,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c7adb85126171156defaf721e2724e6","sha1":"b388fb70832cbed561764a960dfd63983885083a","sha256":"ef1bc8be93c49d8be0206b4f658b6405cca882b1e181292b2364b36688ce7985","sha512":"d2560d7ac04a99cb9a90e723a93502834605ee6d7787af214208cb9c601dd6a1716244ccb6d5938bb846c788a207b7d1283b80152c4e20bf7ba77f9ca63582f1","ssdeep":"","tlshash":"be014e26c24c8c2ee6158918cb58b135226fe1c39e85c728e8556a30c91538f3d3bbfc","first_seen":"2026-01-28T01:32:20.541943Z","last_seen":"2026-07-04T03:35:56.59022Z","times_seen":14,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T18:30:19.243Z","timestamp":1782325819243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\nserver: nginx\r\nset-cookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax\nbc1958=6402be08d2ad45315960d6d6e91900ee::1; Expires=Thu, 24 Jun 2027 18:30:20 GMT; Max-Age=31536000; SameSite=Lax\nrc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; Expires=Thu, 24 Jun 2027 18:30:20 GMT; Max-Age=31536000; SameSite=Lax\nuclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; Max-Age=31536000; SameSite=Lax\nbcid=d8u24f6gg3tc73a5dn7g; Max-Age=31536000; SameSite=Lax\r\nvia: 1.1 Caddy\r\nx-request-id: a3057b22-dc9e-4c86-8334-a306bac40edd\r\ncontent-length: 13095\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":13095,"size_decoded":13903,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"aceedee777f88f01a695c54e75040dae","sha1":"26d738fd57e8660191c9858c4c3ce238dd9d116c","sha256":"ea913d5e356faed40af8da6f2a05985bb7fcabb57de377e2c0b9824220ee0ff3","sha512":"f6986ee4d9fa56a91d38f4db82de54b3e692317c5f9f7af3978e89178404c7f393114432452abf0c7be9c248ff37028f1f1a2f19b4dfdd79ee3680dda6ab37e7","ssdeep":"192:v2vVL2gSOgg8puRwqLPaLfjbm0cU+2kyckNwkmoYgxdaiCBPM:iVL2jELL4fXm002kTk6kmvgxdaHPM","tlshash":"f142722038f0ec72418381b97ba6ab1a7fd8d247e206550476fc56f54fe6d428e236ed","first_seen":"2026-06-24T18:30:50.612606Z","last_seen":"2026-06-24T18:30:50.612606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":106,"connect":170,"send":0,"wait":308,"receive":8,"ssl":346},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.552Z","timestamp":1782325820552,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 \r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T04:55:31.874486Z","times_seen":17204705,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/favicon.ico","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:21.831Z","timestamp":1782325821831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 24 Jun 2026 18:30:21 GMT\r\nvia: 1.1 Caddy\r\ncontent-length: 146\r\nserver: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":320,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-13T04:54:13.958173Z","times_seen":539064,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:21.843Z","timestamp":1782325821843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 09:05:21 GMT","end":"Sun, 13 Sep 2026 10:05:19 GMT"},"fingerprint":{"sha1":"B3:F2:DC:EC:52:71:F9:79:D2:00:8E:C8:AA:A1:86:8A:C1:E3:43:88","sha256":"11:6A:66:F9:3D:73:5D:D0:5E:A8:3D:AE:47:BE:47:E4:A4:52:BA:81:19:C0:F1:09:0A:1E:E0:7D:58:D9:26:39"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://walletzon.bond\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 18:30:21 GMT\r\ncontent-type: application/json\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Wed, 24 Jun 2026 18:30:21 GMT\r\nx-request-id: 60fee4e32a64c47cef0950c20c954318-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24g7rvjB8tcFLKDTxfc1BA2HkX%2FB2BQycY08GfvxzNDv9YloI9p64zpn5wtp32HncLnxwIO3RhDz7ycYFWgbLjsW5MU6Qy7QeH7Y0V%2FACdCIMDhzRg9SO8SQGk5pdg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a10dcda29eae4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":977,"mime_type":"application/json","magic":"JSON text data","md5":"46a6a0cb45e9fe8a937c1d379f58d2c5","sha1":"055617a08af5aa9a2aba05aa432407288c559367","sha256":"b09f253b6d83ab759c733d9bc894d8ab857dc68b5f1d96f91dbdb764ef816f37","sha512":"9331a0d3aec182cd05fa258fd0bdacca9d1a6d8a1d329d54b2f921435932c0f8d91b1bad9e7e82b118d21f754cecdc340b159d2b1d62a530349d6991b1a5dca5","ssdeep":"","tlshash":"32a0019e24a28b589860d2a5248a61a59586e64292aa6d0692c83b69da402dc6401271","first_seen":"2026-06-07T21:04:41.962532Z","last_seen":"2026-07-13T02:02:47.923456Z","times_seen":153,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletzon.bond/landers/yuz_ca_en_backmymoney_1053/libs/jquery-3.6.0.min.js","fqdn":"walletzon.bond","domain":"walletzon.bond","tld":"bond"},"ip":{"addr":"203.161.47.220","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://walletzon.bond/","date":"2026-06-24T18:30:20.558Z","timestamp":1782325820558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletzon.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:22:44 GMT","end":"Sun, 05 Jul 2026 12:22:43 GMT"},"fingerprint":{"sha1":"89:6A:DA:16:2F:FC:B2:74:EE:69:03:42:05:1E:BB:D2:4F:3E:8A:6A","sha256":"8B:8D:A8:48:D2:2D:8A:9F:A2:7B:C5:15:D4:EE:F1:B6:E7:F5:98:52:F7:53:FD:3C:23:BD:4D:42:E6:C1:66:99"}}},"request":{"raw":"GET /landers/yuz_ca_en_backmymoney_1053/libs/jquery-3.6.0.min.js HTTP/1.1\r\nHost: walletzon.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://walletzon.bond/\r\nCookie: ca11a4bf=39203322bc96afa2c2ad70a7354468e8ecd29cd5501f78a426cdf7356f4b187a|1782325819; bc1958=6402be08d2ad45315960d6d6e91900ee::1; rc1958=ttbc0|6402be08d2ad45315960d6d6e91900ee::65:1; uclick=zLXewVhVaNo1gLalO2CYsn16KfCi5X664ep/7/ppni+Pjw5XtGxUizal/MSxo2NtYPXOdkwX; bcid=d8u24f6gg3tc73a5dn7g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Wed, 24 Jun 2026 18:30:20 GMT\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nexpires: Thu, 24 Jun 2027 18:30:20 GMT\r\nlast-modified: Mon, 23 Mar 2026 15:03:12 GMT\r\nserver: nginx\r\ncache-control: max-age=31536000, public, no-transform\r\ncontent-length: 89138\r\ncontent-type: application/javascript; charset=utf-8\r\netag: \"69c15630-15c32\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89138,"size_decoded":89514,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-07-04T03:35:56.593505Z","times_seen":60,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"walletzon.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}