{"report_id":"3ff29880-75df-4149-a3c2-626f67cecbb8","version":0,"status":"done","tags":[],"date":"2026-06-19T03:40:08Z","url":{"schema":"http","addr":"xmrwallet.app/","fqdn":"xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.xmrwallet.app/","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"title":"XMR Wallet Online | Secure Monero Wallet","dom":{"size":2327,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"63e00bee4d2280b792c597d43ccbbbd8","sha1":"64244ac7c79c020bf65cf76cff6bb1cc9655c661","sha256":"80722fd414796006c9aaa65f535b72ab17d5a5c3ec02a57492585d32b7ae7636","sha512":"44d23674d3c22e426a1a70264bfbbfb18e993316042c939c0aca5265c3025a4f18adfe6ada3ebe50142381833cd565093d10e6493c3ed9d38e129852279f82f9","ssdeep":"","tlshash":"b04110d6a6f3045a3d13e0642f7347492258e403d00edda93e9cb2eccf86584aca338e","dom_hash":"domhashd61b72e4f692789f32e9be4864e8f652","first_seen":"2026-02-18T23:37:18.345937Z","last_seen":"2026-07-12T02:44:20.359671Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xmrwallet.app/","fqdn":"xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-24T03:40:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xmrwallet.app","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":300,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.xmrwallet.app","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-18T23:37:14.01181Z","last_seen":"2026-02-18T23:37:14.01181Z","alert_count":6,"request_count":3,"received_data":3703535,"sent_data":1396,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.xmrwallet.app/assets/index-D3v-wFTG.js","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c4e4261f7278da97f88d183b633d718","sha1":"e8bb01277787701ed6ef8a3d7f6b53ec2b383507","sha256":"e3e6b33e7adc79908e6f178e69de16838451b1f20d275722df7953ad68fd73c4","sha512":"d45701e25eca0f0a0bef90f6c6c7431c83c7250642f5ca0cc78f4198f0cabc8377accc85b2573d4f3bdcfcb51fff53f26a82558ae71277d34e6501813a705eb0","ssdeep":"49152:0I5U+maTe4C7lyC8Q+OlHroC1BTaj6+K3jtmxU3oZ6ifFKZ952Ko9Duu9n40n11i:95C","tlshash":"2b06b42a8e0e4e3fdfce23de7cda098405ec4127b53444a5dade8669421af8c7117e6d","size":3669704,"data":"","first_seen":"2026-02-18T23:37:18.362562Z","last_seen":"2026-07-12T02:44:20.364234Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xmrwallet.app/","fqdn":"xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-19T03:39:44.851Z","timestamp":1781840384851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmrwallet.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 08:43:39 GMT","end":"Fri, 04 Sep 2026 08:43:38 GMT"},"fingerprint":{"sha1":"CC:8C:FA:EE:53:C9:E8:B9:BD:B9:51:3D:DD:78:A3:21:D8:91:17:55","sha256":"D9:FD:4C:D0:97:12:B7:62:8C:79:9E:53:B7:0A:6A:EB:B8:E9:A3:5A:4A:3B:5F:C5:F2:43:B6:81:45:12:A1:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xmrwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Fri, 19 Jun 2026 03:39:44 GMT\r\nlocation: https://www.xmrwallet.app/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::zts9f-1781840384935-28f849a553c1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":46,"connect":1,"send":0,"wait":11,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.app/","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-19T03:39:44.958Z","timestamp":1781840384958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 17:28:23 GMT","end":"Mon, 31 Aug 2026 17:28:22 GMT"},"fingerprint":{"sha1":"F4:DC:6A:16:97:3A:A7:1E:17:2B:06:35:4D:D4:CC:E7:63:CA:4F:CE","sha256":"33:19:48:3C:1B:AE:03:79:62:D3:15:FF:E9:6B:75:8A:8C:E4:42:1F:A6:A9:7A:75:D1:49:C4:3B:64:FD:F0:A9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.xmrwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1806427\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 19 Jun 2026 03:39:45 GMT\r\netag: W/\"209ecdb353ac502bdb8ce3214425716b\"\r\nlast-modified: Fri, 29 May 2026 05:52:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mq5js-1781840385036-403c163fe9b5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2915,"size_decoded":1589,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"209ecdb353ac502bdb8ce3214425716b","sha1":"743ef4399c52dc8a30db34f544de8e8a75087909","sha256":"700913987715ffd4f736a5f4192f4880c4448c3f405e0ced2e392456d9341688","sha512":"4f7f37bdc1a3c16387a422e8387a74cb1e87f82fbe35c2d1ddffc9b2d873439b1b12cf16a4e6fd352d15e51b722e913d161276be04943ce2eb28f383d205c550","ssdeep":"","tlshash":"6251ec638b458d365222c33538e2b6bd4417c44bc6586da4b3ec225e2be9bc4daf33c5","first_seen":"2026-02-18T23:37:18.349216Z","last_seen":"2026-07-12T02:44:20.363404Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":12,"connect":1,"send":0,"wait":12,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.app/assets/index-D3v-wFTG.js","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xmrwallet.app/","date":"2026-06-19T03:39:45.301Z","timestamp":1781840385301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 17:28:23 GMT","end":"Mon, 31 Aug 2026 17:28:22 GMT"},"fingerprint":{"sha1":"F4:DC:6A:16:97:3A:A7:1E:17:2B:06:35:4D:D4:CC:E7:63:CA:4F:CE","sha256":"33:19:48:3C:1B:AE:03:79:62:D3:15:FF:E9:6B:75:8A:8C:E4:42:1F:A6:A9:7A:75:D1:49:C4:3B:64:FD:F0:A9"}}},"request":{"raw":"GET /assets/index-D3v-wFTG.js HTTP/1.1\r\nHost: www.xmrwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.xmrwallet.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1633781\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-D3v-wFTG.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 19 Jun 2026 03:39:45 GMT\r\netag: \"765121d75f14b8cacc766a42986fb22f\"\r\nlast-modified: Sun, 31 May 2026 05:50:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mz2g6-1781840385307-b909f5b9910d\r\ncontent-length: 866756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3669704,"size_decoded":867328,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37528)","md5":"c79d2a0bf09f61437ed02369f54bf817","sha1":"719f1e1f4e017456d86157d80314a751756bd9e4","sha256":"9828974b7e73b95f7a64fec998b980fb9806edac5c2f40ffdf18d2dfa3650dc5","sha512":"1d66725cdfdfa525d9fd3ca66b9f5c0e7299af69ff77ddebbf90fa1bcbcf91981ee5e3da4c42a22605c8b97da4bfab9ce45dfff68c950cf4a1d20fd8162b642e","ssdeep":"12288:+xLI7tU+LkRp5aTe4VHM7lyC83th5ngP3cVf5PY+OlNOyroC1BRuD:+xLI5U+maTe4VHM7lyC8Q+OlHroC1BY","tlshash":"9d259138ab0dcd3bbbc903ca3cb2194884ec062676344479dd4ed1b95a66b9c3157fac","first_seen":"2026-02-18T23:37:18.352687Z","last_seen":"2026-07-12T02:44:20.360786Z","times_seen":4,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.app/assets/index-DqkQA45w.css","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xmrwallet.app/","date":"2026-06-19T03:39:45.303Z","timestamp":1781840385303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 17:28:23 GMT","end":"Mon, 31 Aug 2026 17:28:22 GMT"},"fingerprint":{"sha1":"F4:DC:6A:16:97:3A:A7:1E:17:2B:06:35:4D:D4:CC:E7:63:CA:4F:CE","sha256":"33:19:48:3C:1B:AE:03:79:62:D3:15:FF:E9:6B:75:8A:8C:E4:42:1F:A6:A9:7A:75:D1:49:C4:3B:64:FD:F0:A9"}}},"request":{"raw":"GET /assets/index-DqkQA45w.css HTTP/1.1\r\nHost: www.xmrwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.xmrwallet.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1717322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-DqkQA45w.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 19 Jun 2026 03:39:45 GMT\r\netag: \"9a7ae681bbc663f6a36a253e50617eb0\"\r\nlast-modified: Sat, 30 May 2026 06:37:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ksh7b-1781840385309-cea5da53f971\r\ncontent-length: 6153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":29302,"size_decoded":6710,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29301)","md5":"6072ca557b5a010824efffc54370ab56","sha1":"f3eaa9b123db0a3115a1a4419ad8261d87f9b070","sha256":"2f67805d192d46b99746a5630675a08d31732e414a720f10f1d21e5fe3e23b58","sha512":"9add0efbef7d54e720b79cc6f219b27728b1bad242828fb52d16dc5793d7600d8d79bce451b5fe75fa25e5267f816fbf65e7ba73bddff9fe5f3e99709894d2be","ssdeep":"384:HkGCduY4S+vWJMr6tXilnTs6uWo+3WmjiGlJPGSWn3SFJ5Km:hS7JC6tXilnTs6uWo+mmo6J53","tlshash":"37d255a4b32acc7fec2354ba676cf41c61097186ce26a7e8fe03251296c77f11d22725","first_seen":"2026-02-18T23:37:18.355789Z","last_seen":"2026-07-12T02:44:20.361895Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"www.xmrwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}