{"report_id":"5c2344be-0352-40a5-8e00-1e296ad5ad49","version":0,"status":"done","tags":[],"date":"2026-09-24T23:20:40Z","url":{"schema":"https","addr":"kaswallet.org/","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":0,"asn":14956,"as":"RouterHosting LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kaswallet.org/","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"title":"Kas Wallet - Desktop Wallet for Kaspa","dom":{"size":25026,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (360)","md5":"ec3d59787a3c68896e37fe00bb203ccf","sha1":"edcd56ae652ec98bc0d62cf17a53b1dc72e1b622","sha256":"8327f465e4d46e7252f9ca49bcd5f9e0779e4ec7c687a00d8bb57a751533ba7a","sha512":"98aec3fc4e3fc80dd253851037c916b2c1321dd1709dd264a5b1e3d933808419f091a37a0fa16bb6341c41a3a06f43db6c618b91b1a2830a94e0dd63ff5e12e6","ssdeep":"192:xj08wjHxoVKLaZ9g9okRpwWUnsDiTL8gzHBsdK4rirN94ATkDRzaQ5uQaryNAP6:xi6Z9qp0npKdbeZ94ATkDRuQ51XNAP6","tlshash":"b5b28362adf8423702637ad695a2b36eae904403d8574099b2fe479c8ff5cc1f46391f","dom_hash":"domhash9c214c43538375a75275b718159344d2","first_seen":"2026-09-24T23:17:55.599738Z","last_seen":"2026-09-24T23:20:42.05502Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kaswallet.org/","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":0,"asn":14956,"as":"RouterHosting LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-29T23:20:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kaswallet.org","ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-09-24T23:17:53.348639Z","last_seen":"2026-09-24T23:17:53.348639Z","alert_count":13,"request_count":13,"received_data":1564021,"sent_data":6509,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kaswallet.org/script.js","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e62f2b4a35f9d11f6636f5ca1c3efa2","sha1":"a3254727f83cffbb344ce375f66984393da56dac","sha256":"1bb57159b8bcedfa744cb99c98b2d46f1b0dcdeab7a49491c29f37dc69ef64a0","sha512":"dc116021e55c966d906fcadea1b43198d0e32f645ab11b2ca701b02e48873496aad56a2a9b19535ddf592b49adbe5001e375bf3c224960751074aca30f3389ff","ssdeep":"","tlshash":"e9611186b1f234ba41fa415d831b9764b22b40e2354fd9e1ed9c0e153fd1b6b81b68ca","size":3347,"data":"","first_seen":"2026-09-24T23:17:55.621582Z","last_seen":"2026-09-24T23:20:42.063148Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e006c40f40921788933a3280f580ea7a","sha1":"e0665ff2b9d2d998d1a5ba2413a290418e30772e","sha256":"adaf3402e928e0580bbde327711518a5ee1c273618d9ba42c2dce48a5d80a824","sha512":"fd734563cda292f181fdc39086173d0f560631200b9e77f3787c3c560534fb23294f5eb2b60ca32eca65f89b899ed0a18545a1bf9d730a6c59201cf2a6f43c36","ssdeep":"","tlshash":"95f00cb63c89003883a702a23b739249303a242b740eac52f50c18662f80e6514ab90c","size":615,"data":"","first_seen":"2026-09-24T23:17:55.624899Z","last_seen":"2026-09-24T23:20:42.065846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kaswallet.org/assets/github.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.689Z","timestamp":1790292010689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/github.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 2134\r\nLast-Modified: Tue, 21 Apr 2026 15:06:27 GMT\r\nConnection: keep-alive\r\nETag: \"69e79273-856\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2134,"size_decoded":3486,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"056335bb74206ad9d2462978f040e788","sha1":"f48fb94d8a64cfacab2662a3a8ad437430642fc4","sha256":"c434ee2d99198f9da80b697c6257ae755017b0ab6797aefc47a8ef04f17bc25a","sha512":"d47077030a0eb0da96ca3716cc47fac1ea1a500ea96dac0895958c6bca441949dbcb518e86023f4b5f2e226802eecdfb37cf7751de7d072a128924d0d9a886b1","ssdeep":"","tlshash":"61414cd8f844b13859ac1664736932c4f3df2ccf6885d76025c1371231016c28dbfc21","first_seen":"2026-09-24T23:17:55.603331Z","last_seen":"2026-09-24T23:20:42.056246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/assets/kaspa-walleticons-150x150.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.689Z","timestamp":1790292010689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/kaspa-walleticons-150x150.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 3160\r\nLast-Modified: Mon, 20 Apr 2026 14:20:29 GMT\r\nConnection: keep-alive\r\nETag: \"69e6362d-c58\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3160,"size_decoded":4512,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"39d44aa42635f98dced430898ae413f0","sha1":"54d56da73b36402f4f4ff5e710b29f6ef8ba67ac","sha256":"1ad06e47e2e338e5ba0e8323ef122c28996944fe2d5f219436378288c4ed8a2c","sha512":"2abcc5345c617f1d482b3f51e7940505f326a37c0e127759675bd82a1641a3b276ffeb4e2cea05d1d5801b801bd338bbc58fab13043493e9d8be54b280d2e3c6","ssdeep":"","tlshash":"3b517e606801ad9745deabc0cfdc4061dd375fac5840c14f259d16373e8b77c6c851e5","first_seen":"2026-09-24T23:17:55.604818Z","last_seen":"2026-09-24T23:20:42.057204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":236,"dns":0,"connect":128,"send":0,"wait":128,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/assets/dl-mv.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:11.165Z","timestamp":1790292011165,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/dl-mv.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 114674\r\nLast-Modified: Mon, 20 Apr 2026 14:20:07 GMT\r\nConnection: keep-alive\r\nETag: \"69e63617-1bff2\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":114674,"size_decoded":116030,"mime_type":"image/png","magic":"PNG image data, 421 x 522, 8-bit/color RGBA, non-interlaced","md5":"19139745f80a3493a7468b8168963045","sha1":"3fb6dff26e2199085fdc27becdbd1c6256c22384","sha256":"03f97521ee175d8557299bc7661467c2054aba1f18db6e2db743ea46c2d3ad04","sha512":"8e7615ddef0b1535aafbadaab1614a5ebf025111f89cb22525163c178d12765ae76f9eaae7085331c4318ba665fd48844787b652ecdd5d813904b5509920b135","ssdeep":"3072:1+yo3QoSXX9nXMexXwuYibcUDCgncDay17MLzMu77WzB:1+yoAHHVcexXwuYIcUDrZyezToB","tlshash":"34b3129baf114cea13f1c8d7665b926809963ce27a434328c7986ef23b1d3b13d90d17","first_seen":"2025-10-12T05:55:29.526926Z","last_seen":"2026-09-24T23:20:42.057977Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":127,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-24T23:20:10.078Z","timestamp":1790292010078,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:10 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 28 May 2026 00:26:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a178bae-6256\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":25174,"size_decoded":7735,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (355)","md5":"02309844185f2385b653160aa0bc1879","sha1":"d6088e537a39ef5fd483b9b986c30cbf6fc94369","sha256":"6623797e3ced099ab62270c9340baab4e19e03c15dac16a6d375e0ef7c61149f","sha512":"9b77dffb120598c4dbb24d504cc67f0690a6f43d507b519573141d642591bcfd573a6ef5757523e6acd5e20db79c9fef1f88978496b271c7ccc533229e882307","ssdeep":"192:61RWp8wjHxoVKLaZ9g9okghA4wWUnsDiTENnFsBsdK4rirN94ATkDRzaQQBmBNAr:646Z9bd0npKdbeZ94ATkDRuQPNAPT","tlshash":"34b29462acf8827702232ae695a2b36dae900443d95740c8b2fd479c8ff5cc1f56394f","first_seen":"2026-09-24T23:17:55.606185Z","last_seen":"2026-09-24T23:20:42.058748Z","times_seen":2,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":2,"connect":126,"send":0,"wait":127,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/assets/background-kas-hero.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.683Z","timestamp":1790292010683,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/background-kas-hero.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 1353593\r\nLast-Modified: Mon, 20 Apr 2026 14:18:35 GMT\r\nConnection: keep-alive\r\nETag: \"69e635bb-14a779\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1353593,"size_decoded":1354951,"mime_type":"image/png","magic":"PNG image data, 3200 x 2380, 8-bit/color RGBA, non-interlaced","md5":"02fcbba43244e328b841f5866f2af437","sha1":"d68d2d5b4907e2a014517f9963a457e1be0ff5c2","sha256":"3f61b80d2cde701a173b6e9526f29e091aa67f4938cbb129e2ac1e2ef11c649f","sha512":"6929bf7aeb60ab73e7deb39901e2c407e1dad32417a59ae6072a5b166ffdcc986b80aa444aae4a1334612b5654d2e0a6b443e2ccc474dcdf34a06fbfd8a5f205","ssdeep":"24576:bDiECyb7yXImN7cy9urMywMU0eCIjKNC/z2WEBXD8gfsnW7wG:bWHyoyMywOeCIjKc/yWWXDvIW7wG","tlshash":"272523eff873e5e2fd4f91f356881bd897bd2e6988300671776189dce12a2a525c1320","first_seen":"2026-09-24T23:17:55.611644Z","last_seen":"2026-09-24T23:20:42.059789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":385,"dns":0,"connect":0,"send":0,"wait":130,"receive":781,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/assets/telegram.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.688Z","timestamp":1790292010688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/telegram.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 1826\r\nLast-Modified: Tue, 21 Apr 2026 15:06:27 GMT\r\nConnection: keep-alive\r\nETag: \"69e79273-722\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1826,"size_decoded":3178,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"dcbaf02c1905cf9067b2aadf1c31d9b2","sha1":"7e531c4cab0af214452fdcc55ce1ec1dc5d02e56","sha256":"af889e3f76669f416ee2f6fdffa4bac1cfb80dfec236f917ec4520b946fdf193","sha512":"a01b9e8589118d8f270db58439f350cb407ab440b82597edd68bc6aa345a5a89e393a6b6e2048eecae2f6bb1eafbe3b1445a70d34dce9d443fbd7c74ad74d286","ssdeep":"","tlshash":"e131e777b3e5d3c5cb4a091350204a00e57f8eacc2b187ca4964ee9a4e149c4cba96d6","first_seen":"2023-10-24T09:52:11Z","last_seen":"2026-09-24T23:20:42.060545Z","times_seen":6,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":236,"dns":0,"connect":125,"send":0,"wait":126,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/apple-touch-icon.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:11.536Z","timestamp":1790292011536,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 11555\r\nLast-Modified: Sat, 09 May 2026 16:00:56 GMT\r\nConnection: keep-alive\r\nETag: \"69ff5a38-2d23\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11555,"size_decoded":12909,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ed9d1661f8654f30b83a106995aa5c8f","sha1":"48e42b95dc71e498466f90c4d5219aefd47f9c34","sha256":"c4ffb8337eeeed80e7f3b044a6255f7fd42e1632411c5de6a0fcad7aa1e349b2","sha512":"4872207b14434d5a04ed40d5e51b7115b498a3e32c368439af7922aa8cfb8be83e114587ebd34c6801dbe637d8c17a83f96e5e1bf2ced960c98cd707c732b79a","ssdeep":"192:BUwgtteBDKBBTeF6vme7Ymsz2zqHQ7qQ2peBe4tkLiJZhjLnZOB8oy+Qoqpqa1Zj:BUwg7eca6vvYRz2zcQweY4+LGZPn+Qhz","tlshash":"1a32b08a8685354e851ecf5bc6e7b47a2dfc123f250a96707cf622aa58c36d0b14c367","first_seen":"2026-09-24T23:17:55.618532Z","last_seen":"2026-09-24T23:20:42.061097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/favicon-16x16.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:11.537Z","timestamp":1790292011537,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 688\r\nLast-Modified: Sat, 09 May 2026 16:00:56 GMT\r\nConnection: keep-alive\r\nETag: \"69ff5a38-2b0\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":2039,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"36493030c4831a871271ee6373fe4c0d","sha1":"7c89233e6fdc774a1b94f28f34b6d572ff491564","sha256":"4f2b56217998e2f70c937c5d35bcda9d1c17a43f49e4226c822106e782271006","sha512":"7b342367304536f7017daabf6a91f5ccca638b670ace6258f735b5f3075f47dbae5bef2b3476281a7a28659f807efb6ba3d74be28716eb6c65c53f7eadd27c19","ssdeep":"","tlshash":"80018895796319df8ce9d32fd47f440d2e23b15781449034b507813b957715d082cf71","first_seen":"2026-09-24T23:17:55.619528Z","last_seen":"2026-09-24T23:20:42.061757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/styles.css","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.674Z","timestamp":1790292010674,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:10 GMT\r\nContent-Type: text/css\r\nContent-Length: 24059\r\nLast-Modified: Sat, 09 May 2026 16:55:47 GMT\r\nConnection: keep-alive\r\nETag: \"69ff6713-5dfb\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":24059,"size_decoded":25412,"mime_type":"text/css","magic":"ASCII text","md5":"29dda34d7231300ea0163eb715ceb45f","sha1":"63418cb14cfbf82ef7d6c78eed6df9c54474b711","sha256":"e9ba7d8387505b7177ac2234fdea4d67242e349c55dbad3cc7af143d0cc57d55","sha512":"9372a575e0ebef708c0e5103b9d4ec287322a1b00d4bc8d8669491e73cdafe77d9a165f57b3b83fa290482222189619d61cb5b7ad285c5921162ef0590db3259","ssdeep":"384:b8JHYOy65sLkPTsV9/X1c3BGrV8yITqgkPk:bfOy65sLnV9/1c3BGrV8yITqpPk","tlshash":"d2b2669167b05e1479bfa87c9256eb4cb358f006850fcdbcaae3306c9ecd1d51962f0a","first_seen":"2026-09-24T23:17:55.607377Z","last_seen":"2026-09-24T23:20:42.062443Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/script.js","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.676Z","timestamp":1790292010676,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3347\r\nLast-Modified: Sat, 09 May 2026 16:55:47 GMT\r\nConnection: keep-alive\r\nETag: \"69ff6713-d13\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3347,"size_decoded":4712,"mime_type":"application/javascript","magic":"ASCII text","md5":"9e62f2b4a35f9d11f6636f5ca1c3efa2","sha1":"a3254727f83cffbb344ce375f66984393da56dac","sha256":"1bb57159b8bcedfa744cb99c98b2d46f1b0dcdeab7a49491c29f37dc69ef64a0","sha512":"dc116021e55c966d906fcadea1b43198d0e32f645ab11b2ca701b02e48873496aad56a2a9b19535ddf592b49adbe5001e375bf3c224960751074aca30f3389ff","ssdeep":"","tlshash":"e9611186b1f234ba41fa415d831b9764b22b40e2354fd9e1ed9c0e153fd1b6b81b68ca","first_seen":"2026-09-24T23:17:55.621582Z","last_seen":"2026-09-24T23:20:42.063148Z","times_seen":2,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":130,"send":0,"wait":130,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/assets/kaspa-stacked.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.684Z","timestamp":1790292010684,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/kaspa-stacked.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 3343\r\nLast-Modified: Mon, 20 Apr 2026 14:20:42 GMT\r\nConnection: keep-alive\r\nETag: \"69e6363a-d0f\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3343,"size_decoded":4695,"mime_type":"image/png","magic":"PNG image data, 336 x 324, 4-bit colormap, non-interlaced","md5":"eefd2b60b1e8d4904051bc613b9cea8b","sha1":"d28f1680fded185b668198db94b4c48e77ba98cf","sha256":"9730349f1ffda27e55dd2455e7ec9fbb4d33a58d3d5ca8a7d1c48d66c03287be","sha512":"a95193b257438306852d1a04eb3c82de8bc108400c459d5aeb64b3514d4f40d00b3fe23a3761d1621e90eda8e2c5acfd0fd2ff1c1e8191d59eadbaf1201aa722","ssdeep":"","tlshash":"a3615ee702bdc7d264434756f28906688cdcbc07c9a3cb57ab5add89a50c733458d4b2","first_seen":"2026-09-24T23:17:55.622534Z","last_seen":"2026-09-24T23:20:42.063835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":236,"dns":0,"connect":127,"send":0,"wait":128,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/assets/twitter.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.685Z","timestamp":1790292010685,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/twitter.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 1504\r\nLast-Modified: Tue, 21 Apr 2026 15:06:27 GMT\r\nConnection: keep-alive\r\nETag: \"69e79273-5e0\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1504,"size_decoded":2856,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"d6d7f25e450b0a62ffe09b70e2fd0eb2","sha1":"1684fd5a178f7cc1f4a2ceb6be622b556e22aa40","sha256":"3ca08bfec428518ab72412ce37d0f7f4974a435e60d89439b5771ad41dad7d01","sha512":"636f04c0e3fe54dec7b1435be05e208dbb4379059be7e9c3936a0a9279dfbd943e29a362591fb9aea444b9b5f7401426511f8b157ec967961e2c7d57f95f3e08","ssdeep":"","tlshash":"66311c753bed6b1d0fac10f435047bd1c192c7028692ed9186a8d026c3e70e09d7d607","first_seen":"2026-01-01T05:07:15.432023Z","last_seen":"2026-09-24T23:20:42.0645Z","times_seen":7,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":236,"dns":0,"connect":128,"send":0,"wait":128,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaswallet.org/assets/video.png","fqdn":"kaswallet.org","domain":"kaswallet.org","tld":"org"},"ip":{"addr":"172.86.89.155","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaswallet.org/","date":"2026-09-24T23:20:10.687Z","timestamp":1790292010687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaswallet.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 03:15:37 GMT","end":"Sun, 06 Dec 2026 03:15:36 GMT"},"fingerprint":{"sha1":"7D:DD:03:9F:79:8C:97:8C:87:9F:8B:F2:AA:81:2E:76:D2:9F:A1:D3","sha256":"04:1E:7A:E3:FD:82:7E:8A:EE:54:2C:7E:76:78:93:76:50:4C:5C:AA:96:32:CE:3D:B3:4A:C1:85:02:34:F6:46"}}},"request":{"raw":"GET /assets/video.png HTTP/1.1\r\nHost: kaswallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaswallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 24 Sep 2026 23:20:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1352\r\nLast-Modified: Tue, 21 Apr 2026 15:06:27 GMT\r\nConnection: keep-alive\r\nETag: \"69e79273-548\"\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1352,"size_decoded":2704,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8d0e521c76edb0d3d8bcee71dfa7d870","sha1":"b84f5b385b1c43b76424ff8973335bcff86b68d5","sha256":"8a6d2e96b81423997c1bbf6dba43bb08d9b6184bfcd8de7f88c6ad9a374b0dc7","sha512":"78f96221cdd500ecff3d85ec0005c2b147c67d37c406758532c3cfceca5ead5fbd0d2ffe2744db16252f15126994037fd3bc8f78ba381f47069535b2519812a6","ssdeep":"","tlshash":"9a21862133cd9adade0a2be5090f2d90c177272d0b85b80000e117a443ab9bae86d6e7","first_seen":"2026-09-24T23:17:55.601981Z","last_seen":"2026-09-24T23:20:42.065177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"kaswallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
