{"report_id":"80347799-981c-4030-8342-d1cc697f01a9","version":0,"status":"done","tags":["crypto","phishing","suspicious","telegram_bot"],"date":"2026-06-27T05:18:46Z","url":{"schema":"http","addr":"allresolved.defisolution.net","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"104.21.68.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"allresolved.defisolution.net/","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"title":"Defi Protocol – Resole All Defi Wallet Pending Issues","dom":{"size":179562,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (386)","md5":"bb7ef08336b2a10dbc56ca550e429b60","sha1":"39a9cc73f421ccb4bf042276c601608d15ea2d0d","sha256":"28ee2413649af8d6ca8bda348a57df8cb0ce41a22a91176d6cd4411aa2fccd54","sha512":"48a973f39f22c3319cce3f95924186511ae6ec78ec52ad629f4ddbed1acece6d7e6394918b22dd4f7aef81ca5ca828a59c61405d0fd37a13297968e640366a46","ssdeep":"768:kY0wBttCtiG/wixd4IIaId8vcr0ihiTVLTx/m:J0wB2xd4IIZd1r0iITVnx/m","tlshash":"e9044010774e5a27321f02cf105377dc24ddeeb4c95299eaf8fea1205be1c693aaa174","dom_hash":"domhasha038fe6d0c14f5a67a295ff3721343aa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"allresolved.defisolution.net","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"104.21.68.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T05:18:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-27","alert":"Detects file containing Telegram Bot API","trigger":"allresolved.defisolution.net/overlay.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"allresolved.defisolution.net","ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":369,"request_count":139,"received_data":5578469,"sent_data":120836,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.20.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":50635,"sent_data":802,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":1,"received_data":43949,"sent_data":582,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-21T22:41:40.060069Z","alert_count":0,"request_count":1,"received_data":75288,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dapp.defisaverprotocol.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-11","domain_rank":0,"first_seen":"2025-11-27T21:31:20.665049Z","last_seen":"2026-03-04T13:15:13.455861Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1160,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"allresolved.defisolution.net/overlay.js","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"5de86f18326e87f5bb09171586625b01","sha1":"e7f79c742d553a90a0d9f948374f5120798f332d","sha256":"1c5f9cad47d94f04a535b51e349df8e8eb85d7c7854a0e38c6aeeea09d96aed0","sha512":"4e0108f08b294549b0291590d567f5cfb7b78e48fab9b26149f0dad0087b965b44e7076cf67d196e3439dddb3c5aee2b04fe0172c17c45e03670617b23461b91","size":10701,"token":"8604019109:AAH7DXnM7aS68a84JXAIw8PSQJ82D4Rjn5Q","is_revoked":false,"bot":{"token":"8604019109:AAH7DXnM7aS68a84JXAIw8PSQJ82D4Rjn5Q","user_id":"8604019109","username":"Workingfinebot_bot","first_name":"Workingfinebot","last_name":"","chat":{"chat_id":"-5182059367","title":"Massive CashOuts Always!","type":"group","bot_is":"member","total_users":3,"active_members":null,"admins":[{"user_id":7000350986,"username":"gu1l9","first_name":"Guillaume","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"allresolved.defisolution.net/overlay.js","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5de86f18326e87f5bb09171586625b01","sha1":"e7f79c742d553a90a0d9f948374f5120798f332d","sha256":"1c5f9cad47d94f04a535b51e349df8e8eb85d7c7854a0e38c6aeeea09d96aed0","sha512":"4e0108f08b294549b0291590d567f5cfb7b78e48fab9b26149f0dad0087b965b44e7076cf67d196e3439dddb3c5aee2b04fe0172c17c45e03670617b23461b91","ssdeep":"192:BGCWMUfUSU1JN+yvgmjEF5PLiOi4G+ygFCWHict+D7FzFrnBUr:cCWMUMSU7g+EnPLiOi4VD+l5rBUr","tlshash":"ae224218967a163401b783aba3c7a7d96621004b7144ca797fbcc74a0f90fa195f73eb","size":10701,"data":"","first_seen":"2026-06-27T05:19:02.491767Z","last_seen":"2026-06-27T05:19:56.347432Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-27","alert":"Detects file containing Telegram Bot API","trigger":"allresolved.defisolution.net/overlay.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"31c0a3e5e1390708decb491b9a9ad72e","sha1":"ba311cf434836061374a6613f8aa1ec8631746f1","sha256":"25854befbcc0cf445cd5ca804425af52372deaff9febef277dc78dbc0bc7f017","sha512":"838c05b275006dc6a1083293560ec340ce52fe40b0830c76b57c965a04a4cb85d67228f9d763960fa8f4e8fe455b317cadbbb74864b08d544eef227371e8868b","ssdeep":"","tlshash":"59d0236a18758c3277d4014e60f9e39c657020906711d701c1d8dc6b6e11ed304f195c","size":217,"data":"","first_seen":"2026-06-27T05:19:02.52159Z","last_seen":"2026-06-27T05:19:02.52159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/script.js","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"438b9dd751e84c1a16daf6de18c0a321","sha1":"dc0712ee036c1fef6e77a0f95ac925ec24d6f89d","sha256":"37a18b68180dc9693bb4c2c45bb5581cadc51d482792439148e9723d6fdfc946","sha512":"7e0f52f39523f0dbc2b2af05ef2598a9cb5db7c60c9bbf7010383be78f3d4e7f0e6fed0491ccec80aa7f766f6c83783d7aa9f34e9944c8a18bced869e09ebffb","ssdeep":"","tlshash":"8961a126a8fa0932402b312e77cf981a3911542b2404de657eccd3442fe4f2596fbba9","size":3397,"data":"","first_seen":"2026-06-27T05:19:02.435765Z","last_seen":"2026-06-27T05:19:56.359614Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66a743f6fbe864ef0ea9363938d052cd","sha1":"08441717432e73f94305ba7150f55e72cf4e625d","sha256":"eabe1f07478c9c1dd7b0dd3dc00f6c385e44c15b3d7894c0fa2e6164959fae72","sha512":"1bc5f710e8da4ccae47e1fdf4cb3897c9cf9ff487d95c7c6ed6819bf58c0dbd83cb7b96e2eebf96c88f23cb9fb34fd8e4310b705078bbf355391c1eac5df84b9","ssdeep":"384:SUYbEO3pKAsG9OTXuLRga97M27hIlp1o7gpPtraKTCLAbVF4gFFpG1sKgxd2UreC:JYbEOZKAV9wXuL/NeVo8NtXCLYV9rXeC","tlshash":"5f92b48b39da7038c32a6774402735c3725e9d68704a9f19d200a9e6bdf1b9558bf87c","size":19688,"data":"","first_seen":"2026-06-27T05:19:02.426499Z","last_seen":"2026-06-27T06:06:51.551857Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JS LOADED","filename":"https://allresolved.defisolution.net/overlay.js","line_number":7,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/1.jfif","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.525Z","timestamp":1782537499525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/1.jfif HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8yLcmr%2FCuYXCWN2gj5dsupc8UiNxyIWsJ5%2FRfOsIzXfQlq7ZVgFv0Cat%2BLxNnjqDw8iGmwbZnDQw8aypD1emmjWdAkdvI9RA4i%2FlChLT%2B63yL2t2NX5dbDnFcIHfWknEivVOvTW0paoJtnIN%2BdCn\"}]}\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9608\r\ncf-ray: a121fd8c098e56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9608,"size_decoded":10312,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"7d0ee743e21ef227f978f479d8e8b8de","sha1":"0041816083d235e50e221501fc93a5db41d6b702","sha256":"a2c822a934b094c51ae4b6fb6d5346a95ea3edbe1b67c061d8612548aca786fd","sha512":"7d2733840e556238274f395acafabb2ff98e6c4de72ab6f99de4fc431544254745c721db9e1692e3f5fd8b317f4e3d81cfeabeacecf9b610a8a1ed5b15e6ad2f","ssdeep":"192:dbtdVHNsWf3DF9tlSrnVczHCo4BTEciLD9OT:db1BfzNlanYCoigbFOT","tlshash":"ea12aec95e62be11c87f213631b30906febeb53bad9d7a5e19800873a32d0c258cd5d9","first_seen":"2023-06-13T13:09:47Z","last_seen":"2026-06-27T05:19:56.345578Z","times_seen":151,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/14.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.554Z","timestamp":1782537499554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/14.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OUwzZoMc5PA2R%2FelhhLQvXaDLcyj5t6NL%2F4eJylRqT4tUD335B3UnkkFCCLe1k%2B4lDRbQgxnRkvOqcznOYKsog4qghtyOmyIrHVUXob8j66MWQTIQ18r57DzsETYBie2f76F6cMxaH58hF8T27UI\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 110899\r\ncf-ray: a121fd8c399e56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110899,"size_decoded":111671,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"9e2256cfa5aad3b33af05f3fee4dc9ef","sha1":"f12f30f7e822fe995bbf92d8354bc532b2d6f3ec","sha256":"76407b1a6027fcdf55d537cb88bdcf45018af5417ef668ac8b58d4a11663d653","sha512":"bd576b9f34aabe8a13b1ffb8e03078c2c6be74d048fc2788d0cb061c4a0e585ff2c3101b8cb1fb3803243ce229f0d057f34331dc19003c707e15826cc34ef2e1","ssdeep":"3072:Hj6LZRp5JChii9y+OrHmPguEGPL4Xi7pV07TI6+0QqGzq5:GLZ1JaNeHWJEGDY4D36+0QHU","tlshash":"5ab30262a2d7793b6a1b2896770ec61d963194cfc6f830c03308a4a3797e55e6b173c8","first_seen":"2023-05-04T02:59:55Z","last_seen":"2026-06-27T05:19:56.378621Z","times_seen":220,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/Shapeshift.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.603Z","timestamp":1782537499603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/Shapeshift.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXCAsZUEN2%2FpKtP7VjRKynS5dmjK1wxLcBIv1kU1D2lMA8sIsZFRPoMpa79USuI%2Br3QZfQmnHnXu44BgI8z1gG%2BQ0tASUAA4u%2F5pvh4AAYt6UUGc96IFgEY%2B5vDq45NaYC%2B7Ioc%2F1ShwDrndqy8K\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 65599\r\ncf-ray: a121fd8c89b656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":65599,"size_decoded":66378,"mime_type":"image/png","magic":"PNG image data, 371 x 426, 8-bit/color RGB, non-interlaced","md5":"a4ab9d3e8a0e1f912a2580d64d555e32","sha1":"37eb1637f045c9cff93dbe876b54c55911829e4e","sha256":"96a5c2341094a23ae4f0cbab33da46f3402f81f43a4f3cdea0734dfb12844dac","sha512":"758448f96ce723a0f8e30273bcecfb0658981321be7d431fbe866b5c568b5fbb518e68179ce001a64a93bd0ff70c9eea2c10950f482b8cecc56784b268b96399","ssdeep":"1536:36dXW+cM7jVbPt4HHc2PIhBsDvLSNLRfBkucVPiLLon81:KdXW+/7jlGH82PGRKVo0O","tlshash":"cf5302268bf421c5ed739ecd7285f47f93671d0a41e278903b278166892710cbad2eda","first_seen":"2025-04-27T13:00:43.188583Z","last_seen":"2026-06-27T05:19:56.45155Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/28.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.612Z","timestamp":1782537499612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/28.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5omQB0Vn5ZY0OJAoKDwZYFeadzNya%2F%2BIQBgYJ4WmKLPHjbhC1%2F8%2BRXR4S6FiQz3JHyuFO7malCAmRWoqk%2FY6iz0Kt%2BplU74daP%2Bz8uttP0C9yChJZxMfWSniken2Qk42eGsPFVc8Mt8yHJJSf9b\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4278\r\ncf-ray: a121fd8c99bc56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4278,"size_decoded":5056,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"718b36878148b03b8927a890615c89b9","sha1":"2119b627c696ae4a612a1191a2b575f2240c4d34","sha256":"cae62e4a656a7b791c425ee244bfbc9ed2b3de6a4afcd0b50821bfaf19eba427","sha512":"07be7141c66ca984f8c4bbefe2b28e1c9071912436bd9a04ff244777d9924bbf0ed28509c23ddd932fc82168b4fafd74f39a1e8adb03028cfc230270b9c68025","ssdeep":"96:a5aYq6ADJ45pfp2xDnsSjlg5YBueSq0tRB96kDnjO5SN:a5aYqfCpOBWYBZSdt7gE","tlshash":"05914c0bcae977dd4f08f8f9d52d4632ac752ff0186f0d4276291e0e99d306887b1a90","first_seen":"2023-06-13T13:09:47Z","last_seen":"2026-06-27T05:19:56.355202Z","times_seen":154,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/MetaMask.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.374Z","timestamp":1782537499374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/MetaMask.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=naj8xVdaAtSldnYglgo%2FsVVeB7NDWzkxEEi%2F0bNzsczwDbd4l%2BJS94b1Zn%2FZ6uxtFnDH8QJU2nLIvsxlQOz14ENAqltNRzAfiUoyTb0HYTQ%2FxeKUSSN3CaywQlY0ter9h7vDqiDcORk1gmkxyFBg\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Thu, 06 Nov 2025 19:14:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35092\r\ncf-ray: a121fd8b195a56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35092,"size_decoded":35867,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"61958abffd3b548a38436be936785c48","sha1":"12cd1b9c407530d716f6a49072a1e42e7a9a67dd","sha256":"7d909c25e2b613ada85c6fa33a26f2ad519ae129753734b6a43850dd0513b296","sha512":"d80b1ab06d35ae8f9dbd780c684a8c13594b183164ef7379842433cdda1b091f747e4c21b81e26515843c4b83bb430a2af8d0eb78d6c6e0dac09cf20390f9a8a","ssdeep":"768:1bcwzJRSxZ33Th2TFruommFCkLPCB+boEjnHuc5mBVvskupDrAhqa+LI0z:1VzvOTh2gGMsZoEjH5m3vzupRLIk","tlshash":"82f2f1bfa0187c29ee1395112676f0dc2135268f1d40f68e4b8f1ae7daa28f87074643","first_seen":"2024-08-15T09:23:07Z","last_seen":"2026-06-29T07:04:40.926644Z","times_seen":190,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/18.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.534Z","timestamp":1782537499534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/18.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7j%2BELvGTVlaiNhlMdjsTDcyjXC2VPvtY0sjptr%2F36WBdWwrYjP9HOriawn8ahgdzXoMLH%2BPau4R%2BTowkex9rfKAsiMniU1bpqvvjZ%2FeTnNx7hXNQB4sIrNEnIsyitnU19D%2BQjK4bYdftKnlAg3G8\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 44441\r\ncf-ray: a121fd8c199256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44441,"size_decoded":45218,"mime_type":"image/png","magic":"PNG image data, 939 x 939, 8-bit/color RGBA, non-interlaced","md5":"48e78bc97f96bad14ee6b781423a69ea","sha1":"2f25429892cae9b630d0b7cc3db3346e8c9a82a6","sha256":"7c8e8dcaa4ffd377a196a08f3aad50983a3511ee55495db0172c8b6ddad61afe","sha512":"3e08cb827832491bf87eb6f2cb4f0eba2a405443b829e440d14ebddc75e295e7f436d2492a8cf290f307c2630b53c0b96081bdb2f46a6aab9e8864e426e6d9d6","ssdeep":"768:s35mVpUVBnwbZfjtIfzNwmJ0/3CQVCiYJ5o4Cssj+QKaubqi/E:VVqVFwtbtIfzNwm6/tmfo4Cj4+i/E","tlshash":"5113cf147c23aa9beab59d6ac9434f6de4a9405c47b63b48e6331d7d900020bebd7cd3","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.387597Z","times_seen":111,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/kardiaChain.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.540Z","timestamp":1782537499540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/kardiaChain.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3FPNLbMWLsRy2hsp0J%2FHsD9dlmzDiOknwvvsntqG%2B%2B9wkubYLN4xQEdowRq0sWYpsWSwzTHbbnFhjltKI8z3eur4Sx8CjDAkYEbiXmUFLL3juO0Ozk5uBLf%2BNt0IBn0TvxOE9NkyEjBELDlSP7R\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12100\r\ncf-ray: a121fd8c299756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12100,"size_decoded":12874,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3","md5":"bb8cd8979785b1797d923f624327b099","sha1":"cfae6deff5f8924f257b376531d86c42a09baaa5","sha256":"6e82448fb82b8c27bd6a5ef181dd065475cd4d17edfd8757d4d31732795f8e48","sha512":"2bdf6869e5fd0525adbd52100bc41743a8446a5e44e2ae2845632e6213216941378b819e16b915ca8c8ffb38718072e776fa6f3ff0184c72254c379a11ff1fed","ssdeep":"192:VrGdsOiFRQOhg1YpnjY4TuYaKWWvJlvdv5VNzy4eZrkKssPIFM4ErDSspOTtHD:VracFRQ6g1YphTuYXjvdv5vedZr1BIiO","tlshash":"e442bfcf321ddb82d5c0ab308e3e32965b735ca67d39d297e608ad52525e33218876f0","first_seen":"2024-01-08T00:36:03Z","last_seen":"2026-06-27T05:19:56.360219Z","times_seen":33,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/95.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.550Z","timestamp":1782537499550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/95.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U75EyXreUY%2BhHiPOhCdIZ7zz97tE1ew1RIDOc%2FNHBJJyHXC0ZiZ5HhrbMj8%2Fvy%2BpQ3PHKy2wcztH05GfiIOI9prespbhCOQFnRy3xkLCySuO8gs6WguIX4C%2FIpKX%2FmnubvbadZLWoH6%2FIvMc2Nhj\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18533\r\ncf-ray: a121fd8c399c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18533,"size_decoded":19313,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"5406c61022ed27a2edb45f36e6cf4fa0","sha1":"55602958737a25d6fde09f089e8461cff3464d11","sha256":"c611de81c05ee173733c192e37cc783f5d2c4cb3d6cee69f1cca8217ebc71f79","sha512":"f713456223804e5a1c52a31db1230d1ec3444ebe11628980e377a026e8d57935e4c3f48a54ab918ea3322b81514cfae5bd5caf8deb6b50e00bec44622e22440f","ssdeep":"384:yqkmSmKKNWk73iAXnYkB1hn1NBIfFG9YZyQBehpXPy8KDIHH:5kmSyWkbdnjHjniyQ0hB1RHH","tlshash":"2e82bf177a43c053694ec93b6d34a20d7502113de6a70b2c963946bfd27e1af2f6cd88","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.357777Z","times_seen":49,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/86.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.591Z","timestamp":1782537499591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/86.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqcTuoNnPKug%2FBZQAi4SXkrxM2rYZo4e%2BjCuowBlZsU27nXUsw98eqh80nlDGHYT9qupREr8khRjBUrUG2TNKg5L0asO74iAdd5S%2BpUjI0TjylxMjYJL3RPKSgY9wF8S8wcyGsRwvx0dfjTLm4iB\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 04 Jul 2026 05:18:19 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12210\r\ncf-ray: a121fd8c79b056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12210,"size_decoded":12971,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"f54c916fdd25d7d018cc6476ed44cf2a","sha1":"cd650cdd741ed3777d5a620ce4e0b7242536180a","sha256":"22f4e24b77d61acd7bdd8b87371bf7c65539032dca69288d1d5f58624ef973f8","sha512":"c4b2671e2468d2d5c04cfc1c312f50e0682b950b3352612b954732fe96cac30817dec0a8371247241fa8875058d24a95e8ed8e57685a3689f2f6d43b59906ea7","ssdeep":"192:sYGwQJPI6eqAsObjENItMcxi0MyJELs+1aa/hEHKSEpZQbsoxJKdB2:ywQ5I6eqjOPEKLDMyOLsDa/W2BKyE","tlshash":"b842a0c9fd5044e8e8a2ea3845dc0b22f2d817447835dafd354ac13d586682a3d6facb","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-28T11:50:27.676937Z","times_seen":727,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/post-9.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.982Z","timestamp":1782537498982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/post-9.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGeWGl9qZZbw3XnQZItsQiUomxhpuHy7sEg%2BVyQhtCETF8zICc4ri%2BPYwQAE6NKi%2B%2BaM7vX1Z8zfPd9QIhe3EjpXmze4Cv7i8aprdBxbsdohwKob9lhU7ULUHkSqfa66tLUIZ2kgFMDTaX58CSDx\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 3255\r\ncf-ray: a121fd88a93f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":66432,"size_decoded":4074,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"23d29e38b76e0ff556daa2e1bb0b0575","sha1":"ee8dc5acdf554fbf70e4057cdcc733476ae55804","sha256":"ef1d504d68149d16436f0cb1602633dd2cf1af4fa98a56a67fa2cd6491e822d9","sha512":"47fcb3880fc5db50c9935405346feada469533afae8df865e37e757d90f4d6df405f641fcccc5100d268cee1411b444bbaa75dd7ec112c253ff4e4491d58d71a","ssdeep":"192:pZUo5vX0KH0FUwSZBk8z0cZvQA0x+0hpu04vbXD0oBaH0JMixn0gZvx5vJ0KZvxE:nbVzYJ9XEZXJ7veRbaYZenj8l","tlshash":"82537d60be03526c723f911fa123fadc24244ccaea7e26e1f9215623fc7ac5577d1a49","first_seen":"2025-11-27T21:31:34.770422Z","last_seen":"2026-06-27T05:19:56.374611Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.7347579374916126:1782536419:BvMhVTMHsNE2GCGsBT9ZwNRT5MnK6M1JeysCMjO9lVc/a121fd83e92256c1","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.362Z","timestamp":1782537499362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.7347579374916126:1782536419:BvMhVTMHsNE2GCGsBT9ZwNRT5MnK6M1JeysCMjO9lVc/a121fd83e92256c1 HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13271\r\nOrigin: https://allresolved.defisolution.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: ATcKtqXa27NjeOi2v4IHQBqMtJV65qta++LqsFX2Mk7I7SDoIKxH5deO517wjAMrs2eSYYEUBnsLvZiGMcNG6rMUqEQjyAv2ae9k3/RF30N26zgCEvoxVbEk06GtjDVpNwURvlRYTRo+t3a7GF3jo8ovcIUjd8/RGQDDtDGtQTaWUNKrx2JiY9JY3c3dbTlScDghCkTCj1oO9ymy+75JHvdMFRNwlXKzDqLT9ifxJ54HVPBJz8U4QnCgDzAvl3k/We7xm5prrEXlJqpLqi8nUw==$jwT7qTqf6esCy7qd6i28Jw==\r\nset-cookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=defisolution.net; Expires=Sun, 27 Jun 2027 05:18:19 GMT\r\ntiming-allow-origin: https://allresolved.defisolution.net\r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a121fd8b095956c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15112,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T07:32:23.926072Z","times_seen":16850090,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/wc.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.376Z","timestamp":1782537499376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/wc.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7uRr0Xy2gkcBfVBAdjyEppCGNZoK%2BrGIpJm%2BCLHZe3jB0%2BIHyggf%2F%2FBiCT28abawW6L2zOfWZvYEEEwtsQGvuO3dhsLvx2gy1bZTguVAtZ7rdLy3hSPPwbmcOxyI%2BZ4JsRPFLfJy5BrlEmglaOL\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Thu, 06 Nov 2025 19:14:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7926\r\ncf-ray: a121fd8b295c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7926,"size_decoded":8703,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"a2eb9b5fbc52deadb1b864634c17d562","sha1":"58a1d450ee41c061b552d889a361f61a9f45dd35","sha256":"74f1aed165bda79b322cce24d9c82c5bedfa988ea2c7ce9825599041a5c2e0c1","sha512":"49a3c6d405898e6eac2a9ecf97d56a76207c2e1287fdcc52747c36dd446f5c4b3c22e4cf5c07252b910df724efa1e889a317ecab65ab8d6e278131e29365b414","ssdeep":"192:sNc/9CZuvqI6zIs4yt2JZo43tEJdUYK0FrvvcmjC:sNtZuiI6kRytgZo4A/ZFwmjC","tlshash":"01f19fd52b687d6ac8eedf30706eef38d4056d328ba713eb914825054b6d0cab9c42c1","first_seen":"2025-04-01T12:02:22.550542Z","last_seen":"2026-06-27T05:19:56.342037Z","times_seen":159,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/pillar.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.589Z","timestamp":1782537499589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/pillar.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mtFcIFkyy%2FyfGVtOcbMoVjYpP0ezTs5k68CXhNnx9EoRoGBPWQh5v%2FNYVbs8SHTF%2Bt4NLHEJ2bVS4x%2BVfpYS6zkHWufSlq7PRK4B001zCLq%2BfI2Sctj6mYwT9UxI9kOQRRANL5stnFFwk7SviK14\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1988\r\ncf-ray: a121fd8c79af56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1988,"size_decoded":2762,"mime_type":"image/png","magic":"PNG image data, 401 x 401, 8-bit/color RGBA, non-interlaced","md5":"70a1dab9bca3573989137b3e28508e98","sha1":"16b99cd31fff6bed3f372164707a735e2b8463ec","sha256":"f50f0048bd6dc76096a983f5d5e4c196627ef783d6f42697bceb304371570053","sha512":"6b2c6160473972ac7ead1b358c9aedf860344947dc42c8d6716f18accc002c59ebc062b3d9ccdb6712ec6dab34bee382f56c81609229716791090427a63d4f02","ssdeep":"","tlshash":"8a41c563fdf3f01405c4397baa1c153d9896ceae0411ed0c8e8d5c4b3e649ca06781f2","first_seen":"2023-06-13T13:09:48Z","last_seen":"2026-06-27T05:19:56.361551Z","times_seen":159,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/walleth.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.636Z","timestamp":1782537499636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/walleth.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ME4Q3SrLok6BVOsnWU%2BDO6Z8NRMlbgGEQoe1axIEgpOXPdTNvHJMrf%2BFZpWej0l8yF%2Fkh81zdEsxwODhsN%2FLzyNHWHkNj%2BcLePp2TU7YaaLDglYPtpJ%2BbkOtS26dqVMsZo3Db3p6CICxgOpvabS\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 45109\r\ncf-ray: a121fd8cb9ca56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45109,"size_decoded":45886,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b60336f8dd9ea86285408cb4f96634d1","sha1":"deadf927d91c59432fcdef01163b20a6513c7805","sha256":"10a8f175762a35b6ef987d1e3fe03ad128cee1267de585ee791c7482b9c2f6cd","sha512":"5998947960237380a299a8378d9232e9b29cd9a5a09420ae90c79ce0e507cfe9318b3dc7de93e663096869598a15979c4604fe6788b938fccf3a9bea9300acbc","ssdeep":"768:etTTcaEYPAjQNfNMVpYs307jLy/lXi0GGxle935z1e:epcX0mQNV8a7jLmlXi0GgI9pU","tlshash":"0713d076eda47a4bc1d7843196886404cc325fd7e407ae887aec2a861f1273d1f9b70a","first_seen":"2023-06-06T01:48:25Z","last_seen":"2026-06-27T05:19:56.477943Z","times_seen":165,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/85.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.598Z","timestamp":1782537499598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/85.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBf0%2F6nn1vOaE6h7tIREoeXzQBxKBa%2BZ2h%2BzPjDHAQzZ8Gk0SzoYHxftuM14U%2BZ2n4sKQOeAjdSh0O7H8am%2BMEHiYLwKVSDZvIgCKQpnsNcftaWEBdJ0hf3xU4cRrdBkCUMoNX9B4gYNTGcUM%2F5v\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9909\r\ncf-ray: a121fd8c79b456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9909,"size_decoded":10686,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"334d2db9a560f966534d8a297cfbca74","sha1":"1107fab8ea68030a2de08516e28ba185d37445b1","sha256":"35cb4eb66e9b789c8ed54c150fae469d2844703d18288a0e50a7e1375ef863b8","sha512":"68a65ec29f090634649d6fe3abf6239aed2a8d5e745718dec73759d3fbd9974190e8af8d737bfecda84f315608ef1d05862a0336b47403f19dffcd921c9277a2","ssdeep":"192:hLA5D9p7cIfWdYnvYSm7JVFXFdgo6TYZkGX8NMT8vDqVXyY3g3xgUnF7s:hLA5RpfKYnvYSmNVFXFdgLTYZkZMTm2v","tlshash":"88129e583181800cdd0fe737c4881c2ab6ae8c726b0db9cd0695c2daa0774bbef43876","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T05:19:56.450965Z","times_seen":693,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/dficoin.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.187Z","timestamp":1782537499187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /dficoin.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNq2EYAN%2FTrUSuRO2Fu9G53L03VdlSHZJQP22vXpbheZ0mn0jWChobV1YV3CloE6Tc1Ru7G8yzivIvGV5DP28O3DeHNOzMq%2B23amYGOGySQvRxKGiUzAO6Vj7wSYZn7XwnllhGfvAs6vmMydpZWB\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:23 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:50:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96535\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 426448\r\ncf-ray: a121fd89e95356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426448,"size_decoded":427218,"mime_type":"image/png","magic":"PNG image data, 737 x 737, 8-bit/color RGBA, non-interlaced","md5":"d284286a368edec29560254f017e1823","sha1":"438dbf5fb85de8e6388a260cc081ba8a4be4ee78","sha256":"447bb2cdb4d93f117284470deeae54b028a6fa22c7598b3587b13f8a067fa657","sha512":"8de95b5172933b2203667330d9d43f206ac7e250c85abd3946dbb5d109056bf1f9acad99ca904b0edb74ce72dfacec8272f40728c003f95d7501f6d65789d701","ssdeep":"12288:R5NCdxL3N28G9TebtMz8nuaHrGET51L98spb:n4dJ+eXnua1d78U","tlshash":"9894232a44d6f5f4f4f6a349312582bf80ea8db63766d320be5b70b2017c5ebbb58105","first_seen":"2025-08-16T16:57:28.010214Z","last_seen":"2026-06-27T05:19:56.379824Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/26.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.458Z","timestamp":1782537499458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/26.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jD%2B1%2FvWGeJM9ceQRJ04Zt%2BGbnxVUdc3SNxGHblahgHeioYdjhv9sNLVFn9jqcm%2Fkfy7j%2B8cPq1TwSQA%2BejnINP0%2F7orDdSS%2BV23cuel2RnJ783Y9IaP6zKeTaKOJGTw1aB6rdYVRsATAcEBWj2dY\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 24688\r\ncf-ray: a121fd8b997056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":24688,"size_decoded":25469,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"387b0ca7da4cf322f44c70c23064c529","sha1":"df1dfbbfd01316d5e1a893163db81bbfda376257","sha256":"96e478ae2e152a6c43854b698ae746e4d35db038a1496f560482f6ab10a412c1","sha512":"ee92a8e933e8c7d1fd6e2f7f0517c8cf03a10ec2591066be7a7c7d029a19ffa099d317e8db1bb4211b131e4571b728faaa1e33e0cd971200fd9242e8baadbfa0","ssdeep":"384:u0000IMuGmhjp/6Tz1oWv/bo1vWw3JrvMk6O9gJxnGgwltaxbtGGek5pYYTSWuNW:9MuGmzetTAfrvt6Og/nGgIt0IGDAYPUW","tlshash":"12b2d0c5753f28bd0837e93accb39388ae69d0de9a08c0e9669053d14bb3217348c93d","first_seen":"2023-05-04T02:59:55Z","last_seen":"2026-06-27T05:19:56.477069Z","times_seen":206,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/77.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.539Z","timestamp":1782537499539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/77.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zI6JC89toJ4nlcaJKG3epSW%2Fb2c6bR66yB5CfSx6OxLcfArMKI%2Bcja0FUTTwe0xMR25uYZIdj8D7bJAywurs34ogtohuQa3cCaRfSIrezXRZ%2FwH7rGPg465v066Xaue5DnLFe5BO6CP1QxbGD%2Fwp\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9425\r\ncf-ray: a121fd8c199656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9425,"size_decoded":10198,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"5f3cf20d5755aaaf8c7001986b7742da","sha1":"8c60c012bfe373c8ed5cddaeaae6a61a85b16a99","sha256":"504c9a359cc43d40ec0096c5f64aa51440a31389684e7d80436f64edc1deda6c","sha512":"d14b7f15b8c3ce81c65aa9125f9e1f94d46cb1d5312123a6451aededb8000b588ebcc7ab932b5d264c31b5dc7dffba8f961fb8f140928852336375e5fca98655","ssdeep":"192:gI5VpjXFj1FKvLrHS6fdpDM0gAQULSqMc8:g+dDkPHS6fdBM0GULSb5","tlshash":"0c129e213c34c2cee1b6d97a4e9750e18eceed24b60f7bae516935d686393224ece440","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.348204Z","times_seen":427,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/92.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.620Z","timestamp":1782537499620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/92.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgGTRhcREcoBD0%2FFIpGt%2F9%2F0RwU11w2KXi4KuC%2F7jpqLO%2FKPosG3osODfncZio5lUefWEAcx0N72nq6UsrczY01lonnsi%2BIJnaBJC7sSA2vJ0KrLKIWEeGuZ%2FvGv0lG6bSeMPzwgbxi4rFmmw8mH\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9631\r\ncf-ray: a121fd8ca9c256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9631,"size_decoded":10410,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"5053513633960d52b22b7ada35c2be77","sha1":"d489998cf55f2bd8a18e15625bde018ef93cbabd","sha256":"da100c8001271aa0673900ad8cb38791ca36fa5d8070a34168b23ccbbd02af25","sha512":"2238f5114c143b0099595070948d441e8e1511bfafee9bf61acf86d2e13c781f323938b85cb4c83d08ea74cae82a2e0ee762bea98380602961281b51ecdef0ac","ssdeep":"192:0OfUZWfn5zS9fNqMsEnumMntIFQ/o3MDr5UCYsPKGaGQjNo:7fUIG9V5uRntIC/o8nCSSGAy","tlshash":"33129e3c77aea57299c0ed3f2ec1d6c8f99095f81cd5202f23e60599e55032c3e59ad4","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.388719Z","times_seen":414,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/style.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.722Z","timestamp":1782537498722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McxtHwY8PkSURJpZOwFuI4bvFufuqBQpju3VdvVm83m2yc2Ry5aig6GWibs%2BSXqr4L0RqhxwlpaEQ7BLPaNJ5ch22BANxTkZVI2jtGo809Z0nHHWGzcXp%2Fgrjc%2BzMsd6cuQ4KuHPAShrxyC4zZTE\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Sat, 23 May 2026 08:25:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 1860\r\ncf-ray: a121fd87093056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8179,"size_decoded":2677,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"5b51dc573b739f57f10965eb1cdb7030","sha1":"c416c05e23329ab6920ad35e8245b1ab7433b9d0","sha256":"6f94331ed3ad311783d827f58be0e34af784a412747a7ef6cb429f97ef064bb7","sha512":"a289cd9adadc52556a1a629eee3af154535cb6be1d017a3384bfe70a530d69dbc9117f0acb88ba01ff9a0b975b351fbd00597c7516fa6fab03b7172e09fea1cf","ssdeep":"192:tF/MF+0T4AOPBUD+l6GzVFH++fBKGuIAK+gBeF5Fzju7jlG6PcorQfyFa9lNNpxP:tFEFPuZHFHmFtF5Fi5/aP","tlshash":"2df1f1d27e6b0c42751ad5b47fba8b86e26c9043810ac87d3fd4719c8f462d8947ef98","first_seen":"2026-06-27T05:19:02.388671Z","last_seen":"2026-06-27T05:19:56.382039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/82.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.413Z","timestamp":1782537499413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/82.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLA%2B4N1hpEIe%2FWY1DdisrXdAKzMNKSNTBgBcYT%2BJSMQ2%2B7WI%2FabNkHB7DSp5lmHPpRW%2F4xuizPgLUclPP5PbwFSPM8RKodlh0ER1GvUzUaRCrUSdNyHI0%2Bu%2BIBsTzXrVG7SIqBxu%2B6AikQpIiI3p\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6772\r\ncf-ray: a121fd8b596656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6772,"size_decoded":7555,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"9c57c0e2ec3176b7cababa8f05b5a604","sha1":"96fc6b70edee435b4c3aae29ffed43cf536f0e9b","sha256":"4989e81bf3bd85e60e9fb74a27bf360237bb0e0db53a7ff1aa7ab84b26b24af6","sha512":"62cab8c7b9107bcef9244c7a90b7b4db907ac66d187116eae7136737d258d494397b28e08a83c507db9d5f89d9e7f87cd7ee39ed3a2e3a5138d82423da10fe67","ssdeep":"96:o7qTk42sGoZZ62rbt0+iXlLVIY2mWceiHIuNZ08m4W6wVo7TVL/YVLd6lywoRoo5:4PsGI3NWlLVF2eIkZARw7R/YX6QJUgKy","tlshash":"cdd17e8a37d99f32bc49c4fea469e798af280117444c7c9fa3be6c834a916545ebc110","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-28T11:50:27.644909Z","times_seen":734,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/23.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.609Z","timestamp":1782537499609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/23.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrAaKyERMdk%2FhNp%2BlS0S09nQTeIjr5LY3cnPP81cpkjiiCcEuKu3v9aqhPwSgB3BfpREF24mZ77NRd1yNmE4BAIUQOg8YZcIF8i9t5vz4h%2Bcxo2ath%2F5TT8finKDPMTYb0yJoEYtC6fu6tn1acdZ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 60343\r\ncf-ray: a121fd8c99bb56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60343,"size_decoded":61116,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"5c0d3a4ab850a7ee2a3f03e215b68f2c","sha1":"7b2ddb4eba37f6ce463f1251c76cd3922ec63556","sha256":"644bf22e0705e0673df38ba5a776ac68510a65ca70098da9a0ab16a22adfca19","sha512":"d2fd686eac8f538444128962df7b00edb20d171594402238e0736b3726c96ddd5df9a632f348815c76f53af327c8c72498edb5f136e6550be758cf9da6a0228f","ssdeep":"1536:OBMH/VyXakJBD4xLwcb1pqQGOEKp2iTeLHDA9hJoLipWk:OBMHdyX3BD4xH3GwVajImLiv","tlshash":"4343f1b5a2e1b49ac4fbc4b85dfb970e594c0019b4e9c2378eb637ec1c7274407aa039","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.365214Z","times_seen":109,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/accent.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.147Z","timestamp":1782537499147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/accent.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/index_files/post-9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QFpwQsH%2BQuCfR%2BF8MC6fj2zE7MBEYAfjOLWx76NsRmNkaH22dw%2F0TeBOdfP5giFNyGF8ic2Ku6fgr1p%2Fr1INCnUJU1joeSOMw%2BHom0A4FRWA%2BwmPHcEqtiIgjwYxTh%2FmuNmrxRILUC%2FBdC2KOCZX\"}]}\r\ncf-ray: a121fd89b94956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1468,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-30T07:22:50.33191Z","times_seen":137428,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/76.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.497Z","timestamp":1782537499497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/76.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCHlEh7GI9JK%2BPi6iktTaobTWzpbg0%2F43z7mCmmrqOFppdHKN%2BU5yW4hUEJn0aLaG%2Bfg%2F4YV%2BxRpKDQYpFOXU8J4WwgerwxWfH7Pq8x25wKm7TZ2GAMrOARvnk7agnUKa9ifKLppvG9bLR6RqX7T\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11668\r\ncf-ray: a121fd8bd98056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11668,"size_decoded":12446,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x391, components 3","md5":"90fd247f117d3b36de48ff3012eb75a5","sha1":"bb352c2057f0b61743a2fa41e50794b01ad87a74","sha256":"0e9b5535dc8e598af54858a6dcfe6d766bb839fc50b60ae127245606009039ca","sha512":"02af7734016786fbcc124bb5f5b50f0b7525cba9c63390bf3eaf65093cbf3e28d93169683317ca0837e4be5b7ac89f438cee10d4d50edf6d69b9c1a35a65828e","ssdeep":"192:tC1blKdY5cBhTymuesjV1z8QZr/UnBkh9SmL22nQV+k7dv2:tC1hKe5wtsZ1zbr8mPSU22QASdv2","tlshash":"ca32c0ac3b64e603d968cff1814f40152b614173b9f5aa2cb23d3894dda65e2b5f510c","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.36679Z","times_seen":393,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/exodus.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.503Z","timestamp":1782537499503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/exodus.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJX4xYOSjKW56b0cQhqkvxwJVWNM0HSFBvxIFDZJDfC1q78kRWqUrJfpzsM9pbDY2DfQujGBRi5yEJDB5t1h8MWLIhTLjAh1x0WvYjvmC%2F2Aa4YxCctNdfNAA1R81N%2BNLZ%2F9TYYn9z28OPwsgAQC\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:45:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 303035\r\ncf-ray: a121fd8be98456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303035,"size_decoded":303807,"mime_type":"image/png","magic":"PNG image data, 520 x 520, 8-bit/color RGBA, non-interlaced","md5":"33a246f054b7bb527887e02f04bc3c9f","sha1":"ede52ceb05339723a410ef2ef621f285f264306d","sha256":"c41020fd8dd89184b129bc08ee8b2506e95cffabefa1a02afd66b0537df530bf","sha512":"8a35570c58d73dec8541432d59d67a5f6d5e38ea4d2fff4771a0766bfc2d79fde37da0eef82c220b151c43af1583980cba094ba7c215f758c3b5b4a24ecccb57","ssdeep":"6144:xUHVw6mJvTI2fydKWvlC1cddGsW3ZShRUWxfo0wjHfUKm:0Vwr8dpdGfIy1jhm","tlshash":"d45423e8a5895bf0cb49e4527ef748f240215f807ab00b2d61b5e53c250ab3e936cfe1","first_seen":"2025-11-20T20:18:12.865018Z","last_seen":"2026-06-27T05:19:56.352827Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/gnosis.jfif","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.510Z","timestamp":1782537499510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/gnosis.jfif HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLLwuNJXMSGfSywLw1MsjuAmQbXF4bEFxQc0HhL%2F1iE3XHAfJge5Qj83SSRn3slxk6eUGPawpOph8iNuiJClHeG6xeFCmGYyOjDeixueQ6ZMSkaDDFnAy2ty5cWuYyLDUYQMEJ8gLv1dl5pNaVFV\"}]}\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8597\r\ncf-ray: a121fd8bf98756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8597,"size_decoded":9291,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e39552c0935bee623de6de5e41cc2a3c","sha1":"eab527f7ec512e37b9abe27a69f463fae06db500","sha256":"7b389e0b889cd221bc580878107936fa484f6fd5cb8a7ac8690d032a11d07ab8","sha512":"4855f07f84c455f6dc6e87d08c82eb2270794313f32f06c14f5f0c4df0c0bdf613375bfa9ac76d1a24ccfab02d52d76c4459d66e8640b0367d461878c127a189","ssdeep":"192:oblsRSYEDKlmNBmoNKk0f/D8Tyj637SgZJIkUR:o8SYIs6BmoN30HAQi/4","tlshash":"65028de363449a89ed7d07bc4fe80f62d52c2e40c4a3a30bc06908199b9e7f594d81c7","first_seen":"2023-06-06T01:48:25Z","last_seen":"2026-06-27T05:19:56.344606Z","times_seen":183,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/36.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.558Z","timestamp":1782537499558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/36.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ET1WUnTUUS9OpUjDNPJxcY8HrpLmOWYLTb8xBcwGpnwsLN9bzz4wER8cOYBn9J6s5FJpzNwNv9sD%2FdAY4qy%2FVVdZGO15YjqvevwiAEg%2F0SI3Vav6%2FzP20skjWP4I9rkydyVta20GN8bAA5vCpc4%2B\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 49343\r\ncf-ray: a121fd8c39a056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49343,"size_decoded":50118,"mime_type":"image/png","magic":"PNG image data, 916 x 807, 8-bit/color RGBA, non-interlaced","md5":"5c5057d972ca621414f077541845fc61","sha1":"5d6098b9ea1e26cf75fdd28940f3578ce0127105","sha256":"52aff383fb5a7fd4c71ba1a296dfd1bd917bc7817246020ceddb69ce54a29429","sha512":"9f3217e38890d3cc4191f5f12debfc3e4e7aa5685950a32b0a5b7cdfe839fe79ba57364f1552de75626287823ae875d6e19e835b1e4163ab774d117a3760d1bb","ssdeep":"768:G7XvnugwgI+uy2mtcJofnI1ALQxkth9gtuGdG04ft6UyorzK2/xYA5jH/F:G7NQ+QrJofRQxY9RGuFDrwgTF","tlshash":"7023e166e3669177b4691a213451220348224ebbb53dec8438ef3a9f476bff92c79c05","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.36089Z","times_seen":106,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/4.jfif","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.565Z","timestamp":1782537499565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/4.jfif HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0Z8O74Q97BXc%2FobxlDJI2QhY9tocDgBpn792oRueR3DVOs%2BRxwzO0xAcJcVaMIsH%2BX5Z%2BZPPDtalkh8BoqwtrBmwhngGq45GUG2eiIbuSqCPy4CokFlBeBHDn8luMTdATjVTOt9kAt%2Fw65dR25H\"}]}\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9049\r\ncf-ray: a121fd8c49a456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9049,"size_decoded":9751,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"bffcd93fb63cc028c29f2777ef474b76","sha1":"d534f8e32ae8687b1488ffcf588457b6b286cebf","sha256":"f80bb7b83d39561d0081cc8b001818750c755d7ab628e4090b32347f3bb687b5","sha512":"7132a25b57781b1ec611f618e834df380a658f7b48c914b4337df9b4ddd460b4bcdc6abd30c42dfe67191dc062eea8e98300ca4902d53787e8aa0863af3e64f3","ssdeep":"192:zuCdo9Z/syyeigu7pVDptS9/r7cHdOTnm:zuCO8ycg+3cm","tlshash":"4912bf55a74b2320db2fcf741ed04ab1f2a86d8152f0861be498a595372f8f088d32cc","first_seen":"2023-05-09T07:16:22Z","last_seen":"2026-06-27T05:19:56.456079Z","times_seen":239,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/1-1024x670.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.021Z","timestamp":1782537499021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /1-1024x670.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnKgt6FvbVzW%2BZXec2eFnCkB0E5SoXJ9pEC8vwFM3IVWzOFu8x4dzCcq1Zr0U3uGdVqu4XleTHy4Gg94%2BLrvsUa%2BdIO6QTxJA%2FrTmiohITk6nWi7GP4HxhcvoCGNUUgxgdfF0sQ3Sc69jWM%2FfgfK\"}]}\r\ncf-ray: a121fd88e94356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":1462,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-30T07:22:50.33191Z","times_seen":137428,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/bitfrost.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.454Z","timestamp":1782537499454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/bitfrost.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHnEfhV6WLhk7K19QgeHKtHY7tnZtLrFz89qkrOQ37hTmU8waNQGWA%2FodDTVht9%2Bvkppzcuwa%2Bk3lCJ2PyLn9OEiOX2Eff7LZKVtUce0A67%2BGcZEYTR2HndN0sXCSyQv4gKe%2BnA2KSovBwPGLWGf\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Thu, 06 Nov 2025 19:14:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 190525\r\ncf-ray: a121fd8b996f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":190525,"size_decoded":191301,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e4c2485766554fd4f080d7dcc746b60c","sha1":"0962fc455e87ad8c1cdb66efbb4372bc144544a0","sha256":"a674b9bcdb13aec4419d24445f75d76c51f32ee729332cc223b22238ecfe80e7","sha512":"7573b1b93df6e9460da6efd6fdc67480de61717826de0ffcad838a4f1c269c2fa54bc19464037f3a5292040d21b7e075b77a9577ed8475ba311a25770339a20f","ssdeep":"3072:uCeaeNivb8tniSq3aGZ8ajyuZsTJRuCTw/zu/OVySjVvN7iIa7QNmek:N2Niz8ZiSqqGZ8syTVRuFz3NtNxaek","tlshash":"7e1422e6b8c911f70d04e208138d64ba3923fdcc505a271f629a99eb43df98b98790d9","first_seen":"2023-11-06T22:45:17Z","last_seen":"2026-06-27T10:02:40.499481Z","times_seen":244,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/5.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.474Z","timestamp":1782537499474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/5.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rbxaLX8uDYCDq5iYnHvOudMRuf3QCMLCmSM2yjjLDNzjjgQHd3BeVYZWxjtljEk0QLHO392KxRWvgkjg%2FZvVGy1jedJKTlMRGfuWwLktK0V46EpzEHCzuqibgufW7bvrelNJAaoTichzvmjR0Dh\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 19628\r\ncf-ray: a121fd8bb97456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19628,"size_decoded":20396,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"7eecd68e38d78752d68b7232bd9c58d9","sha1":"08e2bc2256a2da2e53121a44cb7b2fdd7a9103b1","sha256":"eadc543f4ce58c377b91ccf4a8d3cbdb6b937b44bf6604245da471dd0fd8f338","sha512":"876b015e7a699ded40d36d6827018dba66f0e1a96ba4152ee55d2dbf0bad42678f666cd2a85c1c6aee78ca5c6221a60c2697645a49f1818bb2b1770c060966b6","ssdeep":"384:izIUmTzLffq9sGeAIiqQQBG+/ot8+EJnaqra5CQ/8Vt6ps9HhDM+:SI1DfvfWF5+OdHqrabUipkZM+","tlshash":"7492cfd31fe2e385fb9e4f3993529316ab518d3ccca14a8b445192156b3a0b82de4cbc","first_seen":"2023-06-09T00:08:41Z","last_seen":"2026-06-27T05:19:56.372923Z","times_seen":122,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/dero.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.487Z","timestamp":1782537499487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/dero.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t44XOu%2F6837Nosee4Nqvdi3uH93aWUJ3iAnJ58XlNMzKO14oR7ojtMzTg5l9ErRggrH%2BDPRtb4NZAhjJljFBJT0RgweE0fCzrrhWj9vJ2MLKTJX5yUBfub3QUEjPl40u1PmjZFNHDzdXm%2FMf6rsT\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:48 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 139111\r\ncf-ray: a121fd8bc97b56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139111,"size_decoded":139883,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"63e620ef28a01a8fbd22fe824f6f2c69","sha1":"93e0703ccb5bbde71e242174da8458c199b21ac4","sha256":"944edccd10e85c0eea0ffb96ef391dc6dca4c3b7290018ee771e272a8f386706","sha512":"58ce1c976c50da67a595a3b12057536a21e3c7809bfa0d52290070b60283ce71519e7c58b01ecad8295e0bb99d1bcd0920388aa8d8bc9822d772c0dbf50233d6","ssdeep":"3072:lqdESqL25ZQaV58o2DGYU6PNROk0JI19YGUgOXDCJJRGj3j29m:lqdzcod8o2DFU6PNRU/QOTCFGj3j","tlshash":"49d313e3cc6952858c63e81518c6aabc79375622c6702d057cd93e9c8c87b5f9d78e8c","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-06-27T05:19:56.397756Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/93.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.578Z","timestamp":1782537499578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/93.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BE5pk5V5hKb7YgRYJGBAE65IIY6uJ2xJXGEyKIDdGk048gbRkhiXhie0shgH1Vlucj71r0SXdQs7JgL4VB5CoQxkSdB%2FegsjRvtSdTmjmFufnFp0VEr%2Bgp17X3IEiE0%2FD383lKVODLSRdpU0q5Sf\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6571\r\ncf-ray: a121fd8c59ab56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6571,"size_decoded":7342,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"cacb62e1229d9747af539bf23ec2205b","sha1":"6b0a630b478bf13b6d536c9e14367975ad2c60f4","sha256":"aaddf98e30d1277a8d7597b1ff73e6bb1bd60efdf5a3f55a3e7cf0bbe40444c0","sha512":"a45a1394b1a2311dd3313e96e79d6bb1ba7c91896ebb58a62d16f5567029d9d04dc77c66ef058c30ffd2752ae38a04fc1f4a68cac604f39f8ffaf7c1b26a51ae","ssdeep":"96:XFX329hz9mwQt7WyrBfneED3uPq0ko8o4gQz7ZVZWUCaSPTPbVJTRs8o:XFn4VineQ3oqW8kQz1W5aSPTPbVto","tlshash":"95d19edbb2e9677ef425cf395c00f46a3e556b39eb9c6c0dd51a01580e32cea0d8e220","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.399682Z","times_seen":49,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/88.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.521Z","timestamp":1782537499521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/88.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gE9brDfZRPqOiYoKpkMWvNDMR%2FL5M%2Bstd1pFGPUeEAPmgqm4IQCJ6aikCymsrS7NI16Ws4cOoZdRlgiRrJQs2%2FHrX7putFYkqAkrNyJBGICRA%2FkIm3UB7jP%2FuXrC5gPje2QWxj3zqACTURhy%2B38F\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9614\r\ncf-ray: a121fd8c098c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9614,"size_decoded":10391,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"df8b9be6ab001c952141bcc0d2dd3a18","sha1":"dcdb9772083c0f2d339681a1585df3cbcdf95aab","sha256":"cad836e38abd3a18bc965f97dea766e39ada552a301ed8144c8516101ddfd0a0","sha512":"3de4d38b6e0380bc30b7eef8d726ef66b8c16df84385b6378aec1bed7f718398f9a497a101a210048096e463288de8c75cedb8506277b18b1e71de6b5efc0e22","ssdeep":"192:vI/kesMj3sdYv3Yj/TVlMF+kAehO27g8qh5cF13ZVxLD9qXV7X:wYWsGYD3M4kAehbe5cF13ZVxLDgN","tlshash":"3512cf67b81ec900e795c6f4894208e9cb20df16d6ddb54f93bb435a33502283c7807a","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-28T11:50:27.571616Z","times_seen":718,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.169Z","timestamp":1782537499169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/index_files/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtCO6WBi219Q0S49qKz9iArWmGkzfNob7zZH7Sowf5x5mdlBKL42ocGRh2c3B5zlokEcj7c%2ByrEJHodxOen82iT8v1GWqtIYB0mKYNFgMwt75HUAOauGyTZ%2Bayso6m2Se291FjihEexGyX6y307X\"}]}\r\ncache-control: private, max-age=14400, must-revalidate\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a121fd89d95156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":1916,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-30T07:22:50.33191Z","times_seen":137428,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/2.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.495Z","timestamp":1782537499495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/2.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unZQ29OC%2B3cwuVNR0JtIsaXcD4BnKalBd8bh%2FwBHCCcyC55EAYTtz9Kq%2Be%2BpOPBzlSKJFwIMUXQEXubuYLJAkCl5nDc3uDYhVbQ%2FK%2B%2FtK5bKcrU8krpKsj9%2B7A42yXjHpsykDcfmi3u5fTqi%2FKoP\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 04 Jul 2026 05:18:19 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4868\r\ncf-ray: a121fd8bd97f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4868,"size_decoded":5639,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"f10cc881b218fe5b9d92ec3716fc45f5","sha1":"df9af0eacee4362326abbbd91a3248e7a34dc193","sha256":"fc38a24d13cf6886249043693821d5c4d86f36e21b766dc81bdc277e2a97a920","sha512":"eb366cac66f055c94eba8e25f47fb6ae7fc6b646cb887580386833dbf9a1360735ac8ac93b9d5284d6f57185e67dfb98c8fbbfab40b6dc3d61fb8c0e3c95cd67","ssdeep":"96:wz1zxC1LpDh2P3JAn7md19B8AT4tYgOCWchb+K5CD+j/iGNQOeTSydO:wzxCVpyz9BP4WgOqhCU2+j/iGNQ7TU","tlshash":"bfa14aaa789e0ea3cd741d442a8464c5c24f2b835986288dbf840d37eef980b64c83d7","first_seen":"2023-06-13T13:09:48Z","last_seen":"2026-06-27T05:19:56.455587Z","times_seen":159,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/74.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.548Z","timestamp":1782537499548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/74.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fF72kHH9VHiYJXfUIev3ax27haqj%2B1s0cuNrN8ZGvKFyrdcRVtNf1JziKA7n%2BF8au%2Bip%2FImTbCijfzVrN2zQopiHQ9UvNMInW2MILHRN0LgpiSKKfxZt3mlYuH4tCMfMnplom0GTLG%2B2nu3AOdjD\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5965\r\ncf-ray: a121fd8c299b56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5965,"size_decoded":6740,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"9604f9826ce692bcc4afde9c631aa345","sha1":"dd7b0c4f286379345941bc671a52739a0d7e3c52","sha256":"731c57bcdd773ca1373353a82e66b2b031be492a157a4f3c6a00199d8e885dc1","sha512":"40b6f4df72e726391fda0c638153462b6cf5ad9be895a97ced61d6293ab8ea837eaeb20b083ab06088752df51eaade78df8d23bbd683fa8959b0488ff4144cac","ssdeep":"96:E8Gu+2/uoYvSwEmfXHuUfzWmYf1w/RYdEUInyUokVg+m:E8Gu+auvvYmf+G7Ye/RcInbokVhm","tlshash":"28c14cd7b645876dd4e8f8bdc2a175312799bbbbea17d62cc316428005030a06ba9d8a","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.33456Z","times_seen":381,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/61.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.645Z","timestamp":1782537499645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/61.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqF7MyAfYYuit0XTvRcxA1aYvyW%2FhxwWJaUfDPP7cRIMgN6pZuKSzhLq37AZ4MsABX3SFv5kGx7m%2BLHmRou8dQSs5nnY44ovd%2BmmUxXO%2Bz1A16%2BDtac1hriglR8cXxNT2UF3FIYW%2FftCTiwwrRDe\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4537\r\ncf-ray: a121fd8cc9ce56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4537,"size_decoded":5314,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"1e91865030211a05f5ca922aef70a860","sha1":"c066943016f62ad0864aa5fbfffbbe96f6cff92f","sha256":"939f335a9d86a45100b00189e49f947c499c52f21ba00c0f6242988f532bf2b1","sha512":"4157f14e22898f478ddde721948f9aee390793ff5e24838987eac080aa59e2bf7b76a8859e8ea356a57f4928b5bbc49c1ac63a997b0bb40daa44a866726d3d7b","ssdeep":"96:aIO6DrerYfFqYUREmk4aXmM8Uv6eh3XlaNfTFUj46f/Ql8:DOJrYfsz+4UCe51aTwn3Qm","tlshash":"00914a8f7e288d42dceddb33b801755b9a4a7598b79f620e1c91004b10f24354938e9e","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.458695Z","times_seen":90,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.963Z","timestamp":1782537498963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 05:18:19 GMT\r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49951,"size_decoded":3581,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f83f36c761c64951c9c2dc756db2490d","sha1":"60389dca03bfc4992941a19d1299776b645703e7","sha256":"02374f99ad8e7454cf79f2199ffafd445addd46cbab0552a6f6f96ceec73049d","sha512":"7988d4174a8d8b359cd7d2c1ba717dd442b49d4c67e26163da30ecbb0a01204c54f8c37611353cf15b238bcf31e27006db1b3e13f9ef4c8a9d58ca6b53a6b052","ssdeep":"768:OFJNGkEA3mknCiFyg2UfIUk+H00YNRYj78:OPNDm5","tlshash":"1b232f91082b9004ab831cd223cf7e36ee0ea2547440d5b9abfd1ddaaddbc66537572c","first_seen":"2026-06-27T05:19:02.402828Z","last_seen":"2026-06-27T05:19:56.385907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":68,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/swiper.min.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.975Z","timestamp":1782537498975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/swiper.min.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCNp1NCFUTQFUGlw3pLYdq7wg0nLDILHs08PhtpfuBB3aDF7aYm%2FXhGKR4uRtm8Dk6Xt4nZh1r9dCERuOP1Xxz30bjSCKRUCd1%2BEOdYTav79Z4uWSwcIfS0sS9SaictgXfy0QA56nfL04CA0R8im\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:47:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 2554\r\ncf-ray: a121fd88993a56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14246,"size_decoded":3369,"mime_type":"text/css","magic":"ASCII text, with very long lines (13989)","md5":"a7aeb35b928b0255d71a82f24126ec18","sha1":"12e1fc4dacac32a4870251788365d2d8e2652837","sha256":"dee6aa0506d6a0f5883b437a55f0b99d5c143e977f59e728eda8546b0fce00f1","sha512":"8b278d6fd9754e6ad38a8df61fbdfe177002948a667aa718426464d177e5da3c4a8929b66ba690829ac8b44fd0c79c4cfc43653344f03e08d9640eb96477d7da","ssdeep":"192:Ib9T4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IZMbHZ+Vnh2AVfHfA4XYz","tlshash":"e952e2585340282753274f374bb1cbb9d6b444c14b93896e92c0ee48d7f6cba236f6e9","first_seen":"2023-12-31T22:20:30Z","last_seen":"2026-06-27T23:20:48.762797Z","times_seen":158,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/58.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.448Z","timestamp":1782537499448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/58.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2An6FvdYPeo4UQ6MfN%2BCDOE8gKzfNUXbIZIjvv9pWCoJLLhigSvNF27kRCIt2UcCPCmPr1dd3pcz%2BJ%2FsBTyqtt53UIWzMzE15Qm1DXfWC7%2BKgQNGKHI%2FqqPvnhPH9ZEXGC4upCgo3t6tEHv%2FHXF\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12222\r\ncf-ray: a121fd8b896e56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12222,"size_decoded":13000,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8ae3dc820f083d1aa3d3a8d0b1ea3cc2","sha1":"5648819f12e4419a26faefecfbca9e5af7607a32","sha256":"42e22e9ff5df734477f917fde052ca33570b552b4cba78e30e2f05003bbdda44","sha512":"d1d8cc8b0eb0ff874741ccd17a26f9d23eeef11feb1449c7c3a8ddcddddd64085f7f82fee40789f2a85b7cf23dce49af7d422dfec64343e55c95e9d3aa017d59","ssdeep":"192:TWogxt0ghr4lpkDKZN9ZkZjJwamFhiAcWH+2KMdc+XJB7:TWnxt0TlO0XZGeaIBc1kc+XD7","tlshash":"5642af3fba7a475ef955ceb64617861b313a74b0603c821deec006e016bf570f854969","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.424108Z","times_seen":69,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/81.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.542Z","timestamp":1782537499542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/81.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irefClaap%2BTqQDmPdJ%2BRaJvn2BOGjYBuSCw70ZevyMun%2FC0ojbys5AJJhmMGMpIsV5nqOiedPo7MXUQ6drzHy1e4O9RRSq1UGY8UsbZpTPTQzuFJ7%2BgzwV%2FxmPwfHxa1HIiOz96lM3H%2Fnpd3dCah\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9463\r\ncf-ray: a121fd8c299856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9463,"size_decoded":10240,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"84d8feebe781731aa6e08cdbdd7308a8","sha1":"4f38c77471524f83bae8137726c6d75f36b223fa","sha256":"5bba75448c46b95dffb78394b2e3597c94fa6e546d2eda6d8a81546ac77aebf6","sha512":"cb9e23f8d712bf6bd06726efb33b91ab03a751e5cf97bf2f440b11621e0ad749c12b5803bb0afe8bfc3b59516711372de0f700d4b86f48babbe9af212c2a6866","ssdeep":"192:vNvMPUwwVnAgDUb+5SboY9pm8myGZuyG+hDD9dfIP:hJwwSgD++wboY9p9D86KdC","tlshash":"2712afbeb703899eeb1cd1fc98b73016e3c3dd1b439c678f0da390298422a17561d995","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:15:41.463481Z","times_seen":561,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/okx.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.573Z","timestamp":1782537499573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/okx.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0vpHND2O16Iuw%2Fn%2BqQTuzcR7JhZtzp%2BYDv5E3xU%2BJnlJ9uQXkqKcv9aYauiTwltmhOmCd1vDkq239aY0n9aQhfeLawsHR3Bn67aUukRNtEWHLUWHVz902b2BOSkUKlluzZcUS%2BMZyYOUmVHNudi\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5844\r\ncf-ray: a121fd8c59a756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5844,"size_decoded":6619,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 358x382, components 3","md5":"bb6810923ae6ea73a9c80845192f624f","sha1":"a56e6eaaf2b926dc983d72b7ed3a209600530a31","sha256":"7a490abd068755df82712017f12e2f1fd85589cab92d12fb67ff62afb15b9425","sha512":"4067237fffc19ca6795663e5d7408c9fc298b817a2f3c9d6c7dca413c1a06c3801f1f917a1608a78167e6f999e367a3e02923b41ec55807cd82b7613a0639c2b","ssdeep":"96:GWlt0Oj0Z8zwUB6lwwTExD69QB18s6m2m/nMw6WBtoJyYD:rlGO4cDBLZLGmtvU86","tlshash":"d0c13cf8772dc088ec75c3318cae93416733ac5dd42698cfe6d69824b0ed9b0b5051d1","first_seen":"2024-01-08T00:36:03Z","last_seen":"2026-06-27T05:19:56.389805Z","times_seen":33,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/pera.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.588Z","timestamp":1782537499588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/pera.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNE0BYEN1k2jC%2BK1I2%2BEMuJR9Quudat1mjD00JfIQwUX5C2rKKUVkiih4CU9rRjChJg%2BFsvVvWimEPNhQ7hEp1%2BhAqnu37%2BW7qvpbvFgeho8jy17g9fezZpdw8OrShWcxPaEvWpKpSus9b9dov%2BN\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:48 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10124\r\ncf-ray: a121fd8c69ae56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10124,"size_decoded":10901,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5049a1ce920a385fb34e48914df09a3b","sha1":"a7875fa04dfaefdc94629f42d91fbfa0e7d4d725","sha256":"bea9ad93e3efddf6989a4d9671e3ea9acb97feb768d73328ab433b5b14db1cc2","sha512":"696bad5fe713e20883a409456df71bacd38394af8d8f4159969b245563a70b26e1f2014a3ddda26ca3c5c20f8328fda3ea32e8cb16f112f43222e90984c259de","ssdeep":"192:nSGR3fqeBv1yC52/tFcEPsuDOMu5dMhVo3vSZHwqwcOPkhGuT6l3Kx:SY3iefyC52ncC3C/aZFwcOchBTMKx","tlshash":"9e226c013685daa11afedff2895dba4340a6e1b61f1b5363c85ab0f5917331e1c04be5","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-06-27T05:19:56.420709Z","times_seen":43,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/16.jfif","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.611Z","timestamp":1782537499611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/16.jfif HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKVMBS4ArR0e1cOZsZr8hrLwiq303CjEbEPlMP%2FTi4y5T38rM%2BWpV6vtfKfRIs7XQMyms1LCx%2F9aExlUqpTSbsRCctHAZp4C9%2F5d%2BKAb97GvpqncM%2BN9s0%2FG5sbUmmFMq3c9SAj%2FQdc31eontwNd\"}]}\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4710\r\ncf-ray: a121fd8c99ba56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4710,"size_decoded":5420,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"a35567d2659de3cafd94b85cf3f82ee4","sha1":"75414616f01e6ed207916a9f513d9d6c4deaaa1f","sha256":"1e0d515bbb1a1406f6df706aa7a0df919c0e7bb011cc19eca411582de48d6958","sha512":"0778dacdf8fc6ff412e9eea37255de033ff1df88e087fe358d52026e107d26d2b637dbe2baab4f627f6a9ea32457e4ad59852f3e9ff341828f328d53a662e2b5","ssdeep":"96:t894vd9RxrxJH+sUeUWuSjl++UlFLO7kDL:OAx/lZfJ++GFLJ","tlshash":"6ea1d6a4a3262d4dc07dab726c812b69e6761e349ee3034fc6801d23aface7714184dc","first_seen":"2023-06-13T13:09:48Z","last_seen":"2026-06-27T05:19:56.39038Z","times_seen":149,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/65.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.624Z","timestamp":1782537499624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/65.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3u4cKExE5PdqtY53WuQauMGBDfaSxiaWXSqKmQz6ZoPOLCT9qG19MDvtuFDJni1cFmdps1XOFHFmyRI3BhH8n6oM7yirNL7aggLbHmZ28XPi%2BAw%2FbV%2BjWjrYrVIb7HNO%2BGNwQY%2BxdW0MZXOoEQb4\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6441\r\ncf-ray: a121fd8ca9c556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6441,"size_decoded":7216,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"861ac4242ea12831ac39d8f160e1fd68","sha1":"20f91e701187535b857b09efb2c9f73fc4993926","sha256":"dcb7c8a0b060ca517f8307bb8338822a957cdcb846171d017b06b7d6f1c14188","sha512":"07b59eb09cc2a071d52029c13f0855b1a5c33fe3a9a8aacf12a8999b2b12140a7468479483276c5681dec3fd75947ed3c6d35450747c2e003eec16050a57022b","ssdeep":"192:MbNstalMTuKVdDseA2vasvlLBM+vt/+GIw:MbXliYSasZBMQ/H","tlshash":"0ed1ae1a770c3822e5c1db7b525170c59b8e6f7ae7e73daf28f4003274d21b26a048c9","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.362303Z","times_seen":88,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/70.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.441Z","timestamp":1782537499441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/70.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MfYG2F%2BNAHWiK9T3u7uB22TFXtFMrOseK%2F7P2mn9ogdr8pDL852fKvpbeY6h7Ywg6GIIcO9G3WfMX3n5bfn2pq0ubzpCf%2BNPQ%2FHfLeV4ni%2Bu0yInENTUBs0DXmo4f0bGmC7t5mmPdDNBUdEIFch0\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8842\r\ncf-ray: a121fd8b896c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8842,"size_decoded":9617,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"29a5fbfb31e67879475ffaf1b4d879a8","sha1":"4d28c3325dd16a6498e00c7c7c1c1d290a3dd084","sha256":"a2aeb90b19e40c8cfcc13f091d982146746d275714a23786b8b059ee591d1cb7","sha512":"663484a5a6cb7b383fc44377f8268bf2d0f85aaff3054a74df7a111bf7cf426c366a660c76bd59503c6bb31c2bebfc3a8fbaf001e6756d5de04b32ce20c1ec99","ssdeep":"192:hP418SzfMetZeL5eFDbp8ukABu2BmIeH5VETI3ly6l:hP1upZI6fp8ukABu2QIUaM1l","tlshash":"ce02af2f7a8a5a70dde8da7437c63dbad7193043c136e46f122341626b6fa9733a1019","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.391082Z","times_seen":81,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/22.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.461Z","timestamp":1782537499461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/22.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjN4iSyT5U3oPal8leR0fsyllUsyvPNxbVy4SxclWShIy0xFMA6fVOlueOVF3KBa32L4d%2BQet2sgBUuovHd03aqySPC8g1l%2FHA%2FfrbRpcdkjjXUMg2%2BGC%2BhH6vdxEeutykMaME5FrkrBaOZ7VmIU\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6373\r\ncf-ray: a121fd8ba97256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6373,"size_decoded":7147,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2c0c0ca62dea20aa4f517e904250bf46","sha1":"f684d057800c382ceb4ac203b225ce74f57a6afe","sha256":"12cbc123dfd5c2cfe38f8c7228429cf7b7b7bedeb3b266d0741b938da614f37e","sha512":"5d72a087a05eb72ecfc1b177dc28e4548fe95073eb1c98c72e1c9c755a7e95195466f59421b06fb78e0d315fc17b1284aef5f962d65811ea52b62e0f83a7ef40","ssdeep":"192:raIMclVgSZxEMohDt5qacTx0c54WXoOTvImSR84k:8clVg0xnzaS54SLImSRPk","tlshash":"02d19fcfccd9e322bab732041677555509751024a9646dbe815308cfcabaedd026b2e4","first_seen":"2023-06-13T13:09:47Z","last_seen":"2026-06-27T05:19:56.424686Z","times_seen":152,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/25.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.467Z","timestamp":1782537499467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/25.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlLeCdmusjpxpURpBayiW7dpjkZaSzgJHlgL3vR%2Br8tybREiYO1NQ4C%2FIFKNLPzYZRbHIgQ04AcO4ptR5I82uXXsqiAS3ZUINFBztZh78MxyV3HK01vv8pNG3rO6ZzHtNQYzeCAlfgxYfl3zLIxi\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 250063\r\ncf-ray: a121fd8ba97356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":250063,"size_decoded":250833,"mime_type":"image/png","magic":"PNG image data, 560 x 559, 8-bit/color RGBA, non-interlaced","md5":"c5b50adaceaf474e48ef1dad150d0829","sha1":"997910694bf9a118cb2baaea2e22e67c92217ed8","sha256":"e6d6d12131ec3f912577d2142605529c2e5c27545b26a5765ddb1df638aececb","sha512":"0a72235ed6a4cec93ffc95ac811e62d92d1ca5a90cc08699dd6c6cd581ab8e4b8a87c535e5585fb7c63c6273cb54ee32bcb8472951b8807a9a2f7b4f8fe7e44d","ssdeep":"6144:QScdA/UEErNvpX3vH+lB3XhK2whHr5KBbNFQZF29wov:Q+/FErN5/elBe55KBbNW29wov","tlshash":"713423cde9d1f8aa6a24ef409cf5b20901b44784e6c6e7385dc6c05e2a104ef5cbd36e","first_seen":"2023-05-04T02:59:55Z","last_seen":"2026-06-27T05:19:56.403685Z","times_seen":205,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/hashpack.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.523Z","timestamp":1782537499523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/hashpack.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=powyv4RGJXAxyh7qFRxxK%2FFEfenpsiwfXXljkI7hfBGgRjDYbdF9n5VGp8S1Vh9I8XtOaHRiDEYloz4Ygvi1PNxLbTmVtvb0dP1Sc5f55RtQ%2Bs6QjMWjRdFce%2Bw30G3lQBxV7iwCMMb85TZIqYx8\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4358\r\ncf-ray: a121fd8c098d56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4358,"size_decoded":5129,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"a823f01331743999087d562faa50e4da","sha1":"17c7d9eeb57b81351d64200b7d36f50da99c8b09","sha256":"0d398a412845985f7baaa6be291cedda305345678c9b99760713784ffd914fa4","sha512":"586a6095f871a49cc19fa7aae02cb9d48de02734ace8aa816bb0e32d9032a27f077a8a9314293f27085256b470ba0564cfdaa0dad977630ae61a225fd4657cbb","ssdeep":"96:ir5yumMqicypyZzDmIi1k5TXo0RtKlWHkRPlkKR+h2pVCN0/074XNV:omMqir8vmI5YNWERPuKEh27l07I7","tlshash":"3d913be60b838a23e882917663b552bf9b078dc7fc18b2b38ca193a5115583185756d4","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-06-27T05:19:56.383793Z","times_seen":33,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/72.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.561Z","timestamp":1782537499561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/72.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1JtBfmRp8GfL5JLHt73eFjHHYEnxJ7BXpOpfTUbmkL0znRskoEmY0NbsrojUergWTq4tHKhoeDfLsVl0FdssXSLrxrBEkOfRcsVhInfeFuqsSBX336PwQn11PgpXqSORYlNC7M73ktPfV%2Fc1JMu\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12620\r\ncf-ray: a121fd8c49a256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12620,"size_decoded":13388,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"da18ede9787e5f950256180b48201a1a","sha1":"e71994a0393e72671d17da68b7bea2349053933a","sha256":"e59dbb683212f450300c2857fafa4e2925eea30cf8e0041464a317880eb43635","sha512":"1afd9a33335185181296c66686fdb6195e3e407afad0d3c58e0261fa94988a08b4cad47c576be7f73d746ed14ce150bc730f5f24ba10145242be59c9f8daa5a8","ssdeep":"192:cgNtQQJLPZ8w0qsyRQ4eLuS3m6QhMwX/EAaCsgKJzzFQBuhkAyLjOqL93lhSA:cVAhFeLuS3m3SSaCBchklCUVT","tlshash":"1442bfd33f27682ddbd6d27186db9322dd148ec34478e32ed69bd21059913e26bb802d","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.381534Z","times_seen":81,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/21.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.574Z","timestamp":1782537499574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/21.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qrar1KNSoIDyhk6DT5YaYV3yaKaiOi4d4T5dGZBTp7ZDyTAWw6fjvDeeN74%2FHiZbJTTi9EffSbAmd10A8P%2BGTpc1wMd7iXSWOi8hlPBqpiHKW4UrDJ2C6l%2Fn6m8YmInnBVEcTOItVQtBDoz5WmpR\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 42250\r\ncf-ray: a121fd8c59a856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":42250,"size_decoded":43021,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"983003d35fe32bf916f9eda381f138f7","sha1":"ef6fb658914e9c45bfb6d3234fe53ca66be72ef1","sha256":"720bcb55a49e45b9cf3def9236490d34e5d372b948b5ddaaf1bf2dea8ea55988","sha512":"d198bcedf95b9a1b04074e32c69689c0268d0f6a8d0c7aa2403a4e53564f72e6e1431236bd2d96e68d7692db9cd8e066f343897a10184fe0d0636c859cacf58c","ssdeep":"768:a8lgov4y2uq28tUBctau71Q8PXmo2CXb9tX6H7:aQ4ylq2geM4Yb6b","tlshash":"18137ba1c7051233b628556ab999696ba1980ff33226cd8449cfb39f83e7f312c71c47","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.419878Z","times_seen":110,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/68.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.643Z","timestamp":1782537499643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/68.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=at8M6JSTxeyW24hnofpU14Z09Ho01Ik9hgiiCqhDCfLkSSm6h5A7HCmvabl2U6g7wRb43nuwnLgVBzmI2wKzS%2FBzQB6kjVTmTepUwy2lp3EbHdxzOy47ixt5xE2t%2Biln%2FA0Ycl7QZNenBXSXbuze\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13273\r\ncf-ray: a121fd8cc9cd56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13273,"size_decoded":14045,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"44dba9361c74ab74118d0c2184f687e9","sha1":"e58506f9c8c452831e288f718b6b969e50da9460","sha256":"238925635fac25852ba74f779b272c734fd146a59a2a882f7ebf568b9548b7bb","sha512":"253a7dc78285556f3af86030bec119ededdbdb4e408b33f9917b6e642cc671325ce9dddf18afc76cce61f7d0a2f6b6228150d0ee834765f70d838f1323bffd1b","ssdeep":"384:YfQ7fI/5xdmh4DDd0hCttB9mcVf2HgBLUuMi:Ym6ZPdDXMchbouMi","tlshash":"7052d041ffa08277f2e6dd70c4af780e72146d984a2e231dd94789085879de38ce03ba","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.412514Z","times_seen":81,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/3.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.646Z","timestamp":1782537499646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/3.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aA8Go2fTCQnzDWY7sncof4pMrAbygap%2FCC536Y%2Bccw6P8rCMipmcIjU%2Fe1fbUFmjhZE%2FFbxMJkSys%2FpzsUKeeT4FD47qtefN%2FfqBFnEDmd7xVxq0RaamT%2FR1p5i0JAGAu%2BUzhAeHDfQgICOfqgks\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 121111\r\ncf-ray: a121fd8cc9cf56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121111,"size_decoded":121893,"mime_type":"image/png","magic":"PNG image data, 2001 x 2002, 8-bit/color RGBA, non-interlaced","md5":"d4c1a7a444b95612f6373f0b536b6ccb","sha1":"ab03568c423bbfde7347782d24fadb646f37daad","sha256":"18009890e1f2fdf240c1ee0b61ba65ae1c8ad13a291b1c2bdb882944e5b61780","sha512":"fe5f9e39aabe465e2ce250aa34d3c2573ebeab7a2d67e691ba2ffa4825a562cacf5b184d79d77bb643fc1024804b849d27e4dc0012a7aa57756f1dc6b214b388","ssdeep":"3072:teifwUo2iSJNtJLEygvwX1KOTKr8/G5ZlgrZMsNUnc:092TEygYFohrxsic","tlshash":"1ac30209688ea065da2c03b05ddf1b802fb92e6515b30b331f76b454bd5b1d33496bee","first_seen":"2023-05-04T02:59:55Z","last_seen":"2026-06-27T05:19:56.416387Z","times_seen":220,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/image-2.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.023Z","timestamp":1782537499023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/image-2.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bI96ALthjvv8En%2FB4wM3a0yWrJlzaxzGUu5OVf0LTv8%2Bby39DUB7eiGOGJclNckBroR7gUosl6wZmOwlk9MgOuhV4bwysBmUDDAvSYSrbl5V2j2ApcnE0YBJmHkFZ2onNZf9rciA4LATsGoHvIgJ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:15 GMT\r\nlast-modified: Thu, 05 Mar 2026 00:35:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96542\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 120190\r\ncf-ray: a121fd88e94456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":120190,"size_decoded":120960,"mime_type":"image/png","magic":"PNG image data, 860 x 860, 8-bit colormap, non-interlaced","md5":"d59dbec506ef7fd715188b431433d407","sha1":"3c55564827a0687d49ec073b80099c4ca1016360","sha256":"38fed24d65758c3f1f84a8431296849b2296c08d87f6e74fadf40965f8b5ac6c","sha512":"52b513a0ee27ccf4ec500c90504fac5c94571d907db6be9c084d7695cd0db325c68ce36a30070b8bedec92b1f34301d5f7ff978cb36beb08352001ddd8b2eee0","ssdeep":"3072:oW2mJXhbLgs9u6RUAhGYyYjpogk6unbTuUst5E1t8uyeR:oIhhvz/hGYtpE5uUg60eR","tlshash":"bbc312d4e8cbaf50d0b79801657b84fde961ba9d56123ec9eef6c604811f3ad4903382","first_seen":"2025-08-16T16:57:27.99057Z","last_seen":"2026-06-27T05:19:56.363416Z","times_seen":10,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/trezzor.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.388Z","timestamp":1782537499388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/trezzor.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHtem2nJ7JlgSM05bS7icAC1ycnitp6bHI9x3ny4880T3yRziNrLDT8dp3k7UB6gWaxsYz1yrVAvgqBKYSwIeaDGYJjIEHtimuJLW%2FlhFM%2Fbt91HxoLG8oiUeaM7EF5V%2BPYTC%2Fk8BE6DbImnZ1%2FL\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 11 Dec 2024 09:42:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1446\r\ncf-ray: a121fd8b296256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":2222,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit colormap, non-interlaced","md5":"a487a9ab1dfaad8367bc4bbbaf8adb4f","sha1":"85223b7780bca3b037c3fc9cb73f82ee65d9c656","sha256":"d2a9eabb71780be7114ecbaba4b43e964d8f783c4fb3e847847c97def51d838f","sha512":"3cbd4f9d5acb86f585cd0b23e564ed1bccd07c1542ac0e5f53528fc65897c336484159411e5c0e9232a3051a868b6093d467608fd4b0c316d15dfd2411c6357f","ssdeep":"","tlshash":"1231c9f45f6d8ed6f7656cb1425e4593402150f618ae8cc73536157daa04f0d947283a","first_seen":"2023-08-12T22:37:38Z","last_seen":"2026-06-27T10:02:40.541157Z","times_seen":107,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/atomic.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.437Z","timestamp":1782537499437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/atomic.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p18QwV3xr%2FOQydpIj0ZRCjU8VjJpvb6XL297E7G9c8hi79%2FfY9MKxBZxn%2FjCwQBM23svzBfIsYNDhfylWZVnnghsJmfuQsZBGtsK4nVQuA0uKtJn54yfOPbIOwukSV1obixU%2B6LaWJVIL4DigOyn\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 442212\r\ncf-ray: a121fd8b896b56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442212,"size_decoded":442986,"mime_type":"image/png","magic":"PNG image data, 1800 x 1800, 8-bit/color RGBA, non-interlaced","md5":"4c02d2b33cf091fd83c7a49819394e41","sha1":"92d69850c2676cd7209ca902bde56023e3eeb120","sha256":"8aeda38ebc65bdf0f1510a228d3110a69c66147cd0e1523d932df039499a3091","sha512":"8af500845c93a90a4385a693edfe650273307e6028eaebc8fac01ec282ee920b2d5a888df95388d0b48d1b9e05e035e21e7606ac527937a1f8ee9857f7e20dec","ssdeep":"6144:q6ninekYBV2skYhyp+mXfayAMGOFt8a9pfIvda4FdrKyIRYOtrLap8+Zg1XnMCKH:q6rkYr2Z+YfZdSa9ZEdaUWrtJa7gMbb","tlshash":"5594239a6766c85fcce245b8220a019327924a3bc9f4497dd12a95905c08efccf97dbf","first_seen":"2023-05-02T15:15:30Z","last_seen":"2026-06-27T05:19:56.383207Z","times_seen":325,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/slush.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.605Z","timestamp":1782537499605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/slush.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roSBUr9pPgkG0m7VFusVgdJDbKzpEMzisA00Die5HJgCg37kv9Kq9dduCUPsizfLTREp7g37SKscGLJ5qgf8AAxTlNpY8lDu%2F0LI7l%2FQxHLPgIPCBtS11fpvQ6vSn%2FUw8yOgZ51wBbrBvMsTUQKx\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10308\r\ncf-ray: a121fd8c89b756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10308,"size_decoded":11079,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b9f57dd1064d34e47c11265c520ca216","sha1":"c9bac9b019d8e384042ceb299970aa07ef61719f","sha256":"1a337fc425df8b81a8340d2e5c2ef52dcf39778607eb769fe54085d66ff3da42","sha512":"206f6b764d7e3fe011855cc8e8f8ea31687dbcf5bdcb3162fbe38eecf8e4deacf2620c91310e2b2f9f1e4a478ee5162c6502eb97ab232bae8fd5779996f6e033","ssdeep":"192:nS6pOTi7J1/c6qIXLr0OkyiEyk2IlX75LWIWZQEpQowrN/GHXzh3/Ny83Mw:SmL7J1/XqI7rWuPWIWZbpxwrN/GHZ/NJ","tlshash":"ad229ec7a21944b7b971d864150abfbcd9707a02fae2d0f8564d707d530daa5e31cca0","first_seen":"2025-11-20T20:18:12.849378Z","last_seen":"2026-06-27T05:19:56.375823Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/10.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.615Z","timestamp":1782537499615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/10.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=laT8zC4d1iyN1nOr9A1aTfiO6KfdAqIHgzyzneAesoXieooEw%2FvJ6UL7V9ng6NUqEZ2FnMknUSWaJBWF4MzgH8Kw%2FL2EeaREFNjig8yj%2FXGHo0f9QRUMjfosYD8F8TipO0Wlls8Hzd0dcvet1k1V\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2876\r\ncf-ray: a121fd8c99be56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2876,"size_decoded":3646,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"b6deb0e7279c3bf98583f3a427511cf6","sha1":"87e65bdf1644a02f32aff0f22e18d835e17910db","sha256":"af71f0f18faf82d35434ab2672aa954ea9b1750c5b3c3a402c6bf40588a906c2","sha512":"a17b12ae44267cca4c8d3cde11351451d4ed159d2328d323807db7f025cc2c98e5b24f74f84c07ee7d2859eb384a6bfa184315a9379a1e68a115286057f1c8c3","ssdeep":"","tlshash":"41512af181781c286d0232e8123f7d70d962ae7710742c20e9d5f8bd758fbe5094a6a0","first_seen":"2023-06-13T13:09:48Z","last_seen":"2026-06-27T05:19:56.457234Z","times_seen":150,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/css2","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.721Z","timestamp":1782537498721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/css2 HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZew4nRlkn4ZsoN8wTKjo33zsrVh9HjwU2FPevZoi5axF%2BdHSgbKjkfYysb70c0jt6prPkK6vNtU3A7cA0wcRo%2BFnp8ApR%2B5bmqYc7RxRlyXvzLcGYIC2oivXjUZ%2FV0LerqvlMx2B0Nn27nGXBWL\"}]}\r\ncf-ray: a121fd87092f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2170,"size_decoded":1914,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1130), with CRLF, LF line terminators","md5":"e3c1777d6efdb9eb564d571461a241f3","sha1":"04ae834b047d7794a961b3e71a3f7b5c8109f8fd","sha256":"6b3f8aa1b2470c56aec6f460bdbb425084ccf13231b7c3fb72d4239d1f240a19","sha512":"49e7bac68cfbc6f86075d35feeb0a4dddea37f53169bce702fcc7ea5648e83d97f1899b4473b252adbf6989e15ca5aa6289d8047bc2cb22f9b67b2fa3c5788b8","ssdeep":"","tlshash":"2741d73ea2415129d053005572b9f3a83a354121a6034740a39df879ee8cdf710ebddc","first_seen":"2026-06-27T05:19:02.420901Z","last_seen":"2026-06-27T05:19:02.420901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/73.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.483Z","timestamp":1782537499483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/73.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=we5y3BvPAdFmd5JYWGOGp9vxIfby0xp6pvPT6%2BCfKt%2BKsTaIEhXeSjl9WczNlhpUxwOBTNujBVuuYiocfOU9dGJXe7KGf2YJNk8gjKZF9SZNrWzZwEW6AfVqj5TSTY5bd%2B4VxXz%2FaqIqKqRSO8jZ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8416\r\ncf-ray: a121fd8bc97856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8416,"size_decoded":9189,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"56366be44f07057e0a6fe741d4149a81","sha1":"87b25f903cba5e29d0929c011cf19dce15f7d0f8","sha256":"597cd6041a61ed8aa90e33367d3c119e65c71081ed1725ca3934dcbd9e11dce4","sha512":"b979c7196d959238ea4e7ab8af96e4d9d1ca36a4762e43115b6379b2ecdf230474305e5b98bc981bd180bb8d71e94ea31fc88e4d9ecca33a7b896a4fe40ca450","ssdeep":"192:ucsEOsPSV4PT0VwT2z3CFduILGbfZS64Ev3:VsZKSV4Oz3qdnLE37/","tlshash":"f7028d5b7ea16f91fa9cdf3489c30296af905970b5a3651f0dc820584f38784b88b3b7","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-28T11:50:27.626773Z","times_seen":533,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/a0e18f7a-d41b-4153-b38e-16f8b53798cc.js.indir","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.968Z","timestamp":1782537498968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/a0e18f7a-d41b-4153-b38e-16f8b53798cc.js.indir HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2B98c89aZ0XaKUQahSIwgJi%2FAj2qdpHlJJfgNsjmvPWoMuPNu9JZlSyvJ7jhbne5h7YEJ7Sr9YJgbKPBFFiuXNzK%2F5epX%2FRo%2FGqN1nqrgT8tax571CzL7aspzYmGLeNsRC3P7pZkx8uQkn8XHHgO\"}]}\r\ncf-ray: a121fd88893756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2170,"size_decoded":1916,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1130), with CRLF, LF line terminators","md5":"b81bbd3da69dba940c078ba2679d9022","sha1":"6b9af3ad4f5963ade58089470596e879d5a39a8c","sha256":"3b2a0585f25f52b0f9c92766f7106675684496b4376e03f4cc189d639fffd2a6","sha512":"ac70d7e31b9aa2e6f01be04ed0fca75297a8e03d0c390bb6ce6552e2bec9c96ac663b634b130d6ef1d0011d600da850be0f84db7b70a39d1701eed5cc8830c26","ssdeep":"","tlshash":"3441b73ea6415229d057415572b9f3a83a354121a6034740a79df875ea8cdf710ebddc","first_seen":"2026-06-27T05:19:02.422643Z","last_seen":"2026-06-27T05:19:02.422643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/post-6.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.976Z","timestamp":1782537498976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/post-6.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwRPO5L2%2B5AQZnbZY0IUOKiiqrw%2FOLkkBe%2BLv%2B%2FFP0roB%2BSrp6zmHps6Sl0a3BTGHaEhcQn2X27qNKTke9h3eixEmQmH4MyGMdB%2BB3mz5ICKSSPcsL%2FZNr0UTZL5uufghwdBp5%2FNa2IKjV3G%2FkDA\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:47:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 334\r\ncf-ray: a121fd88993c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1168,"size_decoded":1164,"mime_type":"text/css","magic":"ASCII text, with very long lines (1168), with no line terminators","md5":"1ea8d343cd50fbb64bd6cea0dd19edde","sha1":"2412f4af2ae055a51cae3b51ab9c7eb46c2fe1bc","sha256":"4e49ca4f9dcd32a8114ab3c84fd91d30ffd7c805eb864f62c7efe370776fce59","sha512":"666a43979ca45a6fb812c6d58db6b284e1f9f2440964cb54f180eac8cfa64826383f30864519b439cd7e0c8309eb2f50021fb18086748eeaa742be10a04c2bfb","ssdeep":"","tlshash":"cf2137457a27d036e0bb092f91d3b02c112cd45b625fcadff41d9649f9bfa0a226d643","first_seen":"2023-10-13T12:40:53Z","last_seen":"2026-06-29T07:48:34.079943Z","times_seen":418,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/safepal.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.600Z","timestamp":1782537499600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/safepal.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5kELzYTU9PchnAlUMStd8luj4ukc5%2FT73K%2B78JHtSikEFEWOueCEJeLgPIHTECfdPAmUv2Lle7PP8Yew3QYjz1ydn5lmw3YjetFLC9lnc1lxjtsGAlLPODronnOX5cEs8oO2mAQnXba9R3DYg8K\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 14127\r\ncf-ray: a121fd8c79b556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14127,"size_decoded":14898,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b398eeb7494ba3824b4b157d95bb9112","sha1":"108340e3a161a188278774f108a16fe5993ec520","sha256":"be22c46bdc3d3eb523c8b23b793c4057debbcdccbd54b306c2d47e8648faf217","sha512":"a132fce8a47d329e8bc3e5348e7d285cd03074900c8e728c69f8b581f9e0bb3d7226f91c94e9971c53f7e05c4d1ca99ea04a6cf332accf27f131305a89e8d83c","ssdeep":"384:wOJNu1/Nnc+2Ul846vC16esVEy4ZavMkRMUgYRaMOOOOOAJ:wOLSk1vC8e1y/MjmaC","tlshash":"77521a24c19218bae4432f29bbb528c7869ad67de53de54873df0c872e47b50fd20c68","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-06-27T05:19:56.400944Z","times_seen":136,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/63.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.649Z","timestamp":1782537499649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/63.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EMUc4L9RPZ2uQsUGcZpGY4ZPxw5be3uDgRfTmIKlt77D09zLGe%2F0kTsUGfFD0czHPKvoZG%2BQKK72pxU8TZTyO%2F9yG8oq283ZkQHz7mBqLmZpNGplmotde8JZYn7keVVUyJGhD65VDmfwJ29xLnB\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:18 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4371\r\ncf-ray: a121fd8cc9d056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4371,"size_decoded":5142,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"565c359964dc0c3fdf8f7805b2809aa0","sha1":"245bfa9d9ac67d5aaaf47e4b876e5c72512aa207","sha256":"5b35453265a71682e034d57dc12860288ccc2295b556285cbbcc906221186778","sha512":"d68695f782acefe5ea8ba2e7d09c4ccdbb5d841640d9d44d3d9b5005703775529f207e8d2b52e7e11f8af3465487f9adb9cbf2718cd365cdb6ed7ca0d65aac6f","ssdeep":"48:AiWTrX3wKeZy/IiGF/9xmzrXXdLAWHc/vAZ+ZekdB64ra5rPpEDJjLLiHsd4kQ/:7TwCFMzrHVt20kHNa5rPClKge/","tlshash":"cf915b4b79888a12c702ef76555d2736b2d395c7e00cff1c51a298818163843cd33ed0","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.371834Z","times_seen":65,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.254Z","timestamp":1782537499254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://allresolved.defisolution.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 25 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 154841\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-30T07:34:35.704043Z","times_seen":207983,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":36,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.283Z","timestamp":1782537499283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a121fd8a895756c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19688,"size_decoded":9200,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19688), with no line terminators","md5":"66a743f6fbe864ef0ea9363938d052cd","sha1":"08441717432e73f94305ba7150f55e72cf4e625d","sha256":"eabe1f07478c9c1dd7b0dd3dc00f6c385e44c15b3d7894c0fa2e6164959fae72","sha512":"1bc5f710e8da4ccae47e1fdf4cb3897c9cf9ff487d95c7c6ed6819bf58c0dbd83cb7b96e2eebf96c88f23cb9fb34fd8e4310b705078bbf355391c1eac5df84b9","ssdeep":"384:SUYbEO3pKAsG9OTXuLRga97M27hIlp1o7gpPtraKTCLAbVF4gFFpG1sKgxd2UreC:JYbEOZKAV9wXuL/NeVo8NtXCLYV9rXeC","tlshash":"5f92b48b39da7038c32a6774402735c3725e9d68704a9f19d200a9e6bdf1b9558bf87c","first_seen":"2026-06-27T05:19:02.426499Z","last_seen":"2026-06-27T06:06:51.551857Z","times_seen":7,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/Tangem.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.381Z","timestamp":1782537499381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/Tangem.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLuUwVj95AWV3IqXWrd23QupouY%2FnoUey26C8lS770VC4JT2SDsDwBunakUwiLSuydnpyEyaMAXRfBAFPeOyvkOod3FhB8htXkm1RR%2BbFiooCPX%2BZio%2BMpUPLnZjeRPFJaRFkETbQV8RCyz%2FlSwT\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 10 Dec 2024 17:15:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1506\r\ncf-ray: a121fd8b295f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1506,"size_decoded":2280,"mime_type":"image/png","magic":"PNG image data, 148 x 148, 8-bit colormap, non-interlaced","md5":"05d9b0b39c846bfbb20a2f0027920f14","sha1":"68e2e5b205b91cdaf267219e65042a9fcf808d94","sha256":"91bc84002c7094f3a2ac547a4566be37c1bf23c8c93a5b4cad48f1f9256a5cee","sha512":"5c8b2ad95f1f4c97919192219bf1cf221303dce2075948e1ac8ef4ae29852942857b12bb575dd819bc7ef92c4ef295b727b6dccd834146f1eca289236d6d0b54","ssdeep":"","tlshash":"fb31f786f51c041ddc14a42b3ca1ca989eb130a81c2a4b3811754e0fee4abe9e9d5b2f","first_seen":"2025-11-20T20:18:12.872921Z","last_seen":"2026-06-27T05:19:56.399024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/20.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.493Z","timestamp":1782537499493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/20.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=44AT%2BLl3TAtX6f9ru4a7mx4BgLRUUa7JAFJSitT0gyoaVZtZvkYI6MCfyKaf3JPUBikhzKqC9LBAwgBCxdjNZMF%2BGsIlIY2ycHj7hfiuoJozq96uT8NCNI4TitKshm3Vtimx35BHKKF3%2BX8F7QeM\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35250\r\ncf-ray: a121fd8bd97e56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35250,"size_decoded":36021,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 400x400, components 3","md5":"436ea3270a7bf77c02a880bfc70d0ee8","sha1":"a41833f1fa92734c0aaed25be38003771e1218c7","sha256":"e55198e9a904067d7fbeab38e71c03167d9dca9b0136ea75bc5c38101e796e8e","sha512":"a5f93bfa04b3191c3fc63f4c2ffcd362c2066bcc10ce9c2067d6f563a516aeb2ae2b9db296dd5a3b535a7e48165f13084a44592b941ea5d61beb7b8434e7aeb8","ssdeep":"768:nqOVN1CaHkhAmx1rRahDZQLEma8ouMeHF+IrJCWQ5mVmi:nqA0hlaOLE38vMeHUIN71","tlshash":"86f29c5add5e6d22efaac3f6886e6d0d574887adb4058fe590b90702fbd5343090aec0","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.381058Z","times_seen":108,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/12.jfif","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.501Z","timestamp":1782537499501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/12.jfif HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BggLxyn1ptaZPhJq%2FdqEOIW6z62VXEJISbocTOUVU5NWGKQzdHirGNue3xA9nVpjEIRd6Fd7Hd6lQ97YL6%2F6voctj%2BUTv3gtW7VDwjvZ9%2BQMQS6OmRTxyPi5ZvAokwhJUWhXPjDGAupKDlI2MMxS\"}]}\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9150\r\ncf-ray: a121fd8be98356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9150,"size_decoded":9850,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x350, components 3","md5":"afd575051825f392b4d9307de977a301","sha1":"c727fbb2f1fd7f6007903184631243db95e8d1c9","sha256":"b88d43944126f8ff60a4bf3e118326a45ce1e5ff089e70d15433e915f182da2e","sha512":"5d185fdc6cb4378d6986ab78f6628746d137abaae99e4b70a90bfce2f4b58676cf681772dba250d033cdae1ae0918583d5e5db8f3e35d57237c72c6d5b23ea43","ssdeep":"192:+ww+Dvt9GpY/9hhcc6s3hBF71/iPZGY5iOpTubuL8F:+wppmUhhcjQZwZZXpubuL8F","tlshash":"87128d077f0aa144e40d1b71eded4b28d66b9e214e96b367f6210e022bde0f111d03da","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.35233Z","times_seen":452,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/71.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.491Z","timestamp":1782537499491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/71.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daPU2qNpyWYtQL3dP9auRa1rtJEnfda9ToI0UVNUJHJe79nkU8O8NtuJ2WprzzPDvasktrJwFXXJptSG9Q0%2B6%2BemPxnKPiXSWpqKeh6FkgrQ3ts2cNj2ssijOzPruZIZ%2FTgso%2B072gR3ubZ0ciCh\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9166\r\ncf-ray: a121fd8bd97d56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9166,"size_decoded":9939,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"101e8eea5938f649246b709be5cfa4e1","sha1":"194141b0b46bd71169b85a97cb0cba2bdf7cc0ce","sha256":"8c24b9e8c650aff6f9f5a16237072a4e5df5ece222fb11083ffd0ed1236b6b42","sha512":"5e7dcfaa2edf50dcfd5481c45ef60d6b74e09824f17680120a0c4285c57ef18e1140ff00887ad49b944ad5890c564872105d6eb281942e698d9bc259fbbed463","ssdeep":"192:gtwZnnRRtQBANBZ8o5tuMcu6OWRHGAgbOHS04gX:2inR7Qu5tdc4mH8iHd","tlshash":"db12b117789e558afeb2fb7984af7240c5cc349fd537c24f177660b42561888aa05153","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.34278Z","times_seen":81,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/90.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.513Z","timestamp":1782537499513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/90.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGfdy2CIP4mcAG%2B9G3iPUfay29RFSMYGgkf14RoRQx%2F8G%2BWAUXrxLw2wbugg%2Bj3fzqLAs5hl%2BH3o0uxfgOP7g%2BgwWIzAL%2FAHJdKxVXk8cKvYxNfq%2FvZ5tDaqLmjj9qgyPvrecW9jDmEnXcIxzC%2FA\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8032\r\ncf-ray: a121fd8bf98956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8032,"size_decoded":8815,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"521d0a27dff013b0b9313ed91121b20f","sha1":"8d4a2cb408105f8b87fd1cb852ab813913227ea0","sha256":"eefc338f4a2058461b6800c0fc41481ad508984f3ac5cd2c49c14dcab80eff06","sha512":"41da961f1b7f73aa69b1cf2cdef84eeb71692ad1d4367f92f7f62ece82db3355368ecf728d9136453385418fec0b051d8152b868e3f164e793e73dffe22a94ec","ssdeep":"192:MuTHUGc+/wV6jZFdkGFTQdAwjmIBONupxJL4jB+:M6HUb+/wVAFd/T0jnosg+","tlshash":"31f1be3db92b88a4da51d2bfe0169d5123977656fc200f4cb34585d987bae6e11c30cc","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T10:02:40.595377Z","times_seen":660,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/89.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.536Z","timestamp":1782537499536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/89.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXNnWzm5cJitKxL3XUY6ZXVyi6qtan%2BQYo2omKwLjrTK80cAufuebSpXMZ4XEE8zK3zVK2pKImrkWVKEYfiuQHCTtKump3a6uChQkl4yp8RKvXVCIbOhlqVVX3X5vp5AH3zR1PEVL90SjpwLXcgJ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10969\r\ncf-ray: a121fd8c199356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10969,"size_decoded":11739,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"2976d6357a37a784f8e579cbea3cf824","sha1":"caf2d7979887e315b7176f3f8fa73e35b56793d0","sha256":"353c7ea72130625c1c2763a37a8bfafd67bfc0e743268650c718801446b9e6c2","sha512":"eb4d95b4bfc8dbaf8b026e9f49538dab1e3df790229bd970e85fcd836b85bf45b8cd8d979b3acc137b773e1c2e32bcde7638fa1cefe00d9990b746900a4e7d3e","ssdeep":"192:HZqWdWQAmSytBoG27ORGg/2+sI3MWt4oI87JxN3MBnXU0fbwk2TzmPtTk:Io1tq7rs8I3MWiBexkcQFk","tlshash":"3c328e9d2e77a65fd88ae27c077de43492b87e32c1521d0eac7850b62a109015cfe207","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-28T11:50:27.654388Z","times_seen":729,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/Unisat.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.622Z","timestamp":1782537499622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/Unisat.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qod%2BilPt0m6ecuJrZAP9KgyAtMIlYbo6UqS5FoAzME5nmbx%2BXTlb9jYkoQVKRWS83Naa9nr6N6MDWcttzoZ8NhjSphv5WZDF78SA6AUbjWKU%2Fd8HLrYFTP%2FcyDLEMf%2Bd12qH5z2mV%2F%2ByjeE2oaJ7\"}]}\r\ncf-ray: a121fd8ca9c456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":1466,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-30T07:22:50.33191Z","times_seen":137428,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/59.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.575Z","timestamp":1782537499575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/59.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugm%2FT1vJaCzc0uhZ8zpWUzYw7C2md%2B30vFkvAkgU7S5Io6GjbXoSwf2k%2FEvO80GZuFJybLRX3QtoaNQEuuvC1co%2F0Y3j%2Bq1U4mhnkcpBuRYDVdlAUPjazhR0lgqgm71F3KBmFPF35ZGwrsIgLd3y\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15227\r\ncf-ray: a121fd8c59a956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15227,"size_decoded":16003,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"93f1a4d3f1f2b01d8eefdb4759f8a0e1","sha1":"3c72ab6e9c474b15b5db6709b515be43261b9424","sha256":"84c01738abf176fddc0f0c05033f3886ba2a67f22cdeb10d3fe38c8f2ad1de1b","sha512":"ce155506ad7d842ef2beb77b1911aba76125f4d4d19fca4e788b7832c31f6a21035bb93a63be2ee45201b845e73103a10021203203475e2cfc3fcb76d57cf43d","ssdeep":"384:Pu4BQl+8FP/DFWH+cAXqyQhc2vVYnCaWeTOzHv2/:OY8FjF8mafV35eTOzvC","tlshash":"0862bfab31db5429f40efc3d2e5e99552402146ea0bc0dae9f189ec4fd5b314ee8b385","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.358418Z","times_seen":92,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/Polkadotjs.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.594Z","timestamp":1782537499594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/Polkadotjs.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5eZRIYAh6Z4TddRQJR8BGi2VKKp%2BDNWAdofrMaXwE00fmWHr9f6z83zmmPmXawBVWa15%2FV0sSJxcUw6hVcpBOimlm8u8UG5wk8qRYQ14F4ZePfHueL73sMtDQOvRmherFII4CTSuLE1enjf7MUvU\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4377\r\ncf-ray: a121fd8c79b156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4377,"size_decoded":5145,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"e9f3cef955ac740663c59d245e2a7e03","sha1":"8e2d6198066ac9869cc2735e1d28e1c6797502a3","sha256":"670255a068c29db28790574d20e23cf201eb8498c0b8f4cc04b9d7659f14cdb5","sha512":"34a0a8721ffea46bdcf513f65d289cee73ebd33b12392de747829bce1c3dfb97dc4c3ec08655474da808fe88c1908b65bf86754cd4fd6cdf9854011a5e3e4fb9","ssdeep":"96:RU55cnti2Uowx2haaMBACeBixE7JgrsBu31H4t6RVSM0pTiyTsdHiD:gL27wla3WrsB0Ot6N0pTiAB","tlshash":"84915c5a424d25e744a7cb2ec8b3148d373d3cd45e174a125238a52041bd588efd3e1b","first_seen":"2023-11-19T22:41:13Z","last_seen":"2026-06-27T05:19:56.350721Z","times_seen":38,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/zilpay.webp","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.651Z","timestamp":1782537499651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/zilpay.webp HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgM%2FayioZamsaZ2dH%2BuXoEpmXQ8xKLQSMiN2f1UYw%2BwAlvmqQmTrKs2I%2Bv01qV94PJ7jBt51%2FtbhqXofxc64Ky1qvt9ig7tZZRUw0MFo%2BRZHzWv5Wrjm%2BlSf%2F82pCyA2SY3czVJ7%2BnfNNVPSvHMS\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:18 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8990\r\ncf-ray: a121fd8cd9d156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8990,"size_decoded":9773,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ec5568f4826c5a69101d4ec36f247cd","sha1":"7050fde6ed228067fbf93be1a4009842042eccf4","sha256":"67104b3d2be0e172d1e11b30e563654a90d54ca7a470246c6e1fdc4447f2446a","sha512":"8ebca3bf32b570fb3550de08c726fb5c1313587239b496e335d6fcf373435ac3af0be690072110d14aa298bdf07193be3e9b297b0df542c400db31b3ea6c7012","ssdeep":"192:c+4i7iBVAPs+g6uvf0KIFsZnyzvLYNVaJHROsVSpJ4Scln9wHb:biBVALg6GsbsNUYNEJ4sVK4SMncb","tlshash":"e602b0df1719d57b861dbb209152c3124adb7f2adcddac2f81535f4c9b2d17280a0328","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-06-27T05:19:56.351318Z","times_seen":34,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/script.js","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.971Z","timestamp":1782537498971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ri6qlFAYOxYbblXyk4EwMrYVBL9wtiVeQ6ZTSwwzzAId3q7VaY7344RWK4vd6U%2Bpfa0Y5uiG5DciOghKfITKqeLG8rkX6j9OAiV%2FJbmDUYaTjS95Hs0eGiKteSIFTSQXhmT9cJenzz1g8vb%2BlZI4\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 20 May 2026 17:02:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 950\r\ncf-ray: a121fd88993956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3397,"size_decoded":1780,"mime_type":"application/javascript","magic":"ASCII text","md5":"438b9dd751e84c1a16daf6de18c0a321","sha1":"dc0712ee036c1fef6e77a0f95ac925ec24d6f89d","sha256":"37a18b68180dc9693bb4c2c45bb5581cadc51d482792439148e9723d6fdfc946","sha512":"7e0f52f39523f0dbc2b2af05ef2598a9cb5db7c60c9bbf7010383be78f3d4e7f0e6fed0491ccec80aa7f766f6c83783d7aa9f34e9944c8a18bced869e09ebffb","ssdeep":"","tlshash":"8961a126a8fa0932402b312e77cf981a3911542b2404de657eccd3442fe4f2596fbba9","first_seen":"2026-06-27T05:19:02.435765Z","last_seen":"2026-06-27T05:19:56.359614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/8.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.443Z","timestamp":1782537499443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/8.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B61JjVIzvbekxV1kR6qq9UEjwH98ZMY5NBsDtq7txPKQIZrsUNgfDMdYXRkBPidpE3vXoJkLnHHlfv9B4RaUrZ6hFEXyUl49XlcDCQH2DMvWbPLUtCl2dDNWcNSkX9LOmp9QbiDW%2FgsleUKUFtrQ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3687\r\ncf-ray: a121fd8b896d56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3687,"size_decoded":4455,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"375599b85d1a5cab5b1e4a0a33f41fe6","sha1":"00270d04f36025881be1ff95edd1f18c066d274b","sha256":"b42ff89d9d8f4d9e1b02f2617b707ac9dbac38f613ed9882216c852904fd1771","sha512":"6bd41b0e666a6800f6b014abe4aebe51082007c1d71f3aba0ad898851de0983192ad42ec13b04b2263a4d922c50d199f810eb440cdaaadd8febe2f54306d838c","ssdeep":"","tlshash":"08713b645867818a9ecc53045300d2bf4d93ff17cca3ac559e3fe9818d31a8aa57d62b","first_seen":"2023-06-13T13:09:48Z","last_seen":"2026-06-27T05:19:56.402941Z","times_seen":148,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/79.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.614Z","timestamp":1782537499614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/79.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3QqqB1PTP6hs4fvANmyT0PMY31AScSSKCv5fogI0bMj09kvZeJGsCdWcT1v3m%2FI2NmjZQ426SkoCsf0gW4AiRBsJxDIrFlW3lOBx%2B5QD0GNx%2FOT%2FS8HCrOjZagny2ZdyXGMrgzXiBesoN%2BzDne8\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7091\r\ncf-ray: a121fd8c99bd56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7091,"size_decoded":7866,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8d18e470b85fcdacd479aed6c7cdb16b","sha1":"7ba69fb3a9de45c015502158bd12ef6e956a500e","sha256":"dc5c2220234d9d9b75d41400daa8619b4b248f08586d9c04858d43f5c81b2e8f","sha512":"b3b4dca612bbeff4f66e2b2dba378d623ab80f4737d570d73b4472a5ef5867f79abc8a86b4d4ef7d1723b2c2a18b524e8a993a4d08da9a7913cf7514cf3dd443","ssdeep":"192:zILJKEz0FaZ65bU02jrZZkpuABROEwlZMjCul75:yKE/Z6IXgERMjJ75","tlshash":"9be18e38b58f3827d954c6310663ccd6ab726c3350a2f50d9672181fbd772a47a4617a","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T05:19:56.454339Z","times_seen":694,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/24.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.633Z","timestamp":1782537499633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/24.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWbJU0Wa2COcadSHnJi8pb2OUwAB8PzxP39Ajs26111pNqE4dMLfDd3J9D80EoWwgKbxXkAPF52ALedAL5pwm8Uhw7OoR3vrRCFB%2BKhPr61E0Zkpzx2pEa3x%2FPhctOjc%2FxS60En2u6ZLT9wsqneJ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 91961\r\ncf-ray: a121fd8cb9c856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91961,"size_decoded":92732,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"ae1502eddf4d2ed89abd36907dd3ae8a","sha1":"85a1b2f60966e3b41bfb11b0cca11987f5ba29a0","sha256":"83dd6cc3fc06b0ca67139753f39387ac160d8cfd09512c71dcaff77f418334a1","sha512":"0cdf8cc3de8043ee16c00cf740b695ee210a76a18ab953a1f0cff32b72517e1c9414fcab6858865445f37984381ce6275803e37aed02eb6c71f5fecd0e771ef7","ssdeep":"1536:9Pbw5fdpl2O7AlAkYqebFBr92CmKPGXgtqAg+7MUJBmVGTHg2xC11gu/fybF/j4Y:9Pbw5fdp3mKNbFBr9lmKuXSIEBmVH2xt","tlshash":"c593028fdbe467986e582067ee451bf0c90e60fec8ccd8b06f8515b5c262918bed71d2","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.394487Z","times_seen":108,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/Authereum.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.417Z","timestamp":1782537499417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/Authereum.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhNiZrv8MOuEdaLBFFbIReJuM4bA9FCXhZUR44EsMFKI9%2FVWjxaCi%2FTw0HuMngCzuZdQjfDOU7snKqovYc%2BDxFrd4RiYlrqrZwoo3KCGiAsCZ2H8xmxb6rommsup%2BeZWVuikGzmT685udAbkdbTH\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 35248\r\ncf-ray: a121fd8b596756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":35248,"size_decoded":36021,"mime_type":"image/png","magic":"PNG image data, 596 x 596, 8-bit/color RGBA, non-interlaced","md5":"32f3939207b77c1837547d5ed4f86110","sha1":"6328554e98b36825492aa602fbbec3b291ca1de9","sha256":"ea78de38aec5050c307d1abbc36b8c2b8b6e8abe70092ee9a55feb20be80b362","sha512":"0628b1dcab63b18f76b04a80358a4e3f984865d29013ebffe8cc84b9c826fdac119e42eb1317916380ba8f48366d9cc19e5d8b933ae0f97628f830f9266ca006","ssdeep":"768:jI8tuZtZsIC39E8jBp30q6j2WTr+zTbCPH+xUvn0N4+d:jI8ax8EgeyWa44Uvwd","tlshash":"0bf2e110fba812f262d5c759131ec58bcb3f4606f5052ee65b47e36b6600bca68c8d2e","first_seen":"2023-05-04T02:59:55Z","last_seen":"2026-06-27T05:19:56.475292Z","times_seen":229,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/80.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.509Z","timestamp":1782537499509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/80.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxBwzCu%2BrTNkiCZUfgf3hxj2DWbQWpmxWooJGsxdfFtukPPU43dia7Z59XjJLj9L%2BMsFulBvEgcGNmNw7I8uQeMeAq6%2BYCsYydyFNeEk54638dpDTV6JG5xXMa%2F5eKggVgnCL747WlbMvQgTZX38\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6667\r\ncf-ray: a121fd8bf98656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6667,"size_decoded":7440,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"8628295c6cfcbe2c37bab42b69ee414e","sha1":"2f24dea38389734f56eda191707ad6c62a026f8e","sha256":"6fa0b252dce3014cae4d9043162c934d76492b2b76ae283877aafc411d939c5c","sha512":"078430e084c9b4752963d6374ba226804f2d5838c59c8bf9872f3badd78915db3f6fd346df918a9c3351b5ca1c6df1b9512202757d6ca7169c4d61a0191c307a","ssdeep":"96:bRRqBqQCV+nbwKSpMi7Ho5HBvRXTJnTVssyDHwfm54WztuTgMwmQOCXxHBCO7c:b+LrTSzH4HBvRs5QfmjB5mvCBF7c","tlshash":"c1d19eff37982211d098f9324a48649a3f33032c519133ec2063612f6e6bc1c4a84f9d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-27T05:19:56.374013Z","times_seen":602,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/opera.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.577Z","timestamp":1782537499577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/opera.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaZ3P5NFRxJanDo6c1sZA2ZD7lNRGhBn%2FjRZ%2FBPBlBVzn2Xwd9Bfn9LM4qsy%2FHHUQ5tjG2rXLUG8LLfOawNKW50fVFbgQlKaOtiX1pDJxXvkDP9BfMEAiy%2FI8Kz88p1L7J60GfaVfn1WluOOZ4NE\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 11947\r\ncf-ray: a121fd8c59aa56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11947,"size_decoded":12720,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"f39720131cdf8c5cf79be74aec5374fb","sha1":"6632cdd1ded4b8245a496860636e4643bcf5a7eb","sha256":"8caf98efa3d8ec044a39a3923e2a9f6eb39446eb7d6b075726d7f74ecf185cb5","sha512":"960b268e5ee1cfef3e3315afd4422f373f53d2941f0cb45d77b0e2c426a8b57ce96592ae81dcb8d12c4a9f817463d1ac7667cd7bbfd6f8595508f8c3b876824c","ssdeep":"192:dvgut7BRlaxC5W/6Nx69THNVaCoCDvXMTIj6HIzccfnlq3w:5gutlRcaW/6NQVjxIHIzci0A","tlshash":"f132bfdcf16bd84684727d5c53683db3caa23ae2ed740bc7442e6e781907a44c6ec51e","first_seen":"2024-01-08T00:36:03Z","last_seen":"2026-06-28T14:13:05.104271Z","times_seen":35,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/94.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.617Z","timestamp":1782537499617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/94.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxs1HyGHHzluPdA0up59nyI%2FaJMpcACliuU4fJYe5%2Bd9e7mt9z9diRg4vKLIcNddG1Hc5Uk149WB%2Bl%2B6Wf472TvxqlDl%2FoPavRsHjEV%2F%2FCF0YseU7FOPv6SYkf4m3KPTgH7cdMGExDmv5%2F%2BiM701\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4566\r\ncf-ray: a121fd8c99c056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4566,"size_decoded":5349,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"83e87c1cb606f10eac8fb9d8316616d2","sha1":"5c792482b3e251c7445cefe907ca5352ee0ded4d","sha256":"a12cba2cc718959067840903414952054bfe683bbd05d2885dd418b08d77f305","sha512":"91dc8d8648b809bafae2d2dd9e1870cf06921f8bdf95ae9ff96693554ebf31101d734ccc5601c98fda9c53d9f7bdf248d86f316b3a9256c62f81e8685ba1d009","ssdeep":"96:a/O2FekSzTI03vScys+deGvTiDqp8KX5DVNO7:a/OOgzT3vScyLeGeDKpTy","tlshash":"a7914a7f7a18a628ef54fc79c1075113ebcaaf868cd30b8d583115210dd12d1fb9b498","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.40158Z","times_seen":49,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/84.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.619Z","timestamp":1782537499619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/84.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYhZbNMkDIUmxQRGmjlR0wfkUkam96uyZldo%2F0qoCP3Ql8%2Be4Yvbs9thlJinwkfTqs4GajTk8T8jhfC9K7oGWXbXwH3MBtDU%2FwAoh%2B4pOGzhLeUjzM23AJiiPjbrvBIy7MOHaY%2FwYuhjjw1O7OoA\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 4793\r\ncf-ray: a121fd8c99c156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4793,"size_decoded":5568,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"343792786b18339d16d0dd92fb91e6eb","sha1":"bdee6426ac6a6206e15680af46af67376e1701fa","sha256":"5a8304f37ebe014cf58d37de067afcd1ee6da645395dff8c47f277477e64a86d","sha512":"faa030fcb0c1e292f4bc856543bf441d60953fb62bcc703e3405e4fe04b8e606886bb111c90867936d1db22a8f61060fedd59aeb8b6ac3f97bd57cf44a4bba33","ssdeep":"96:fiRi9nj8zm+RO0A/neYYgXA5jypLOKJTFg:KRaIzZRPSeYYgejypVXg","tlshash":"29a17c51322a6b23f44ff6b25c959fcd6bd10ac85c4e523c95af705cc286e8da9054ec","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.376469Z","times_seen":589,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/9.jfif","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.423Z","timestamp":1782537499423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/9.jfif HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSF%2FajEQy4ByNOg5naa9GDsvKuf86sREiVeKkoQYUmJ7LrVxWghdmFPlAhOfNuiFeaIyX4n64RjGvWAyXl2V4K5Wswf2HtCQakqEL0pg3YSo31S%2FK7jaR1ObD83k3IfqcP5qAwC06s2JkP2S6Qg%2F\"}]}\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9267\r\ncf-ray: a121fd8b696956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9267,"size_decoded":9965,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"6f84d501c4e2f99370f9f37c46338755","sha1":"106ee6e3c25d226c86eea2399c3415698acfc72f","sha256":"6f24adafae6e34349e8cf8162081e051426b7eb0ef243db6380422e03d89180a","sha512":"7eaa8c1eba0d0f5daec3c3ddc9496255e05606df7576af57e35571137a293ddddc4758acf875b677d381772ca491a9b8faaacbe125f3381e0c85ba34445f2b0b","ssdeep":"192:mVsiq/GtGljpM0P8TuNRS3ocDaNB+IpZXjEsoCtSIcn6:mVZIx20ka7IeNoIpZXjEsjan6","tlshash":"b8129d4983686325e07d03b25c456bddea603f26d385725bc95622273b3f0f39d840e6","first_seen":"2023-06-13T13:09:47Z","last_seen":"2026-06-27T05:19:56.453598Z","times_seen":147,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/crypto.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.479Z","timestamp":1782537499479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/crypto.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abVS4%2BP24orr6MRAIWaXQAXITIO1OVpwVIGhsAvgSoC212AvE6Ar9oSg3iXVPxJ9AR1i52%2FqekyhvHmMZXGqUPolhfVycLiFopu%2BOmabbdClQoR3qhjppJKbTCLXGPw7T3fvqRk%2Bb54ouVBL%2FzaG\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 106205\r\ncf-ray: a121fd8bc97656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106205,"size_decoded":106981,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"4cbeac57421fb3ca2573db2cf448169a","sha1":"75254a43197634d14746d35a8077fcd83f9fd443","sha256":"f253a7ec8a9aab5227e5e836bd002f78b9f86351bb91d28663437ff48d8e1138","sha512":"3688ffe890e26607d6b6fb8416351ed4d9e618e1681057784ad0e5cf4a040e9f7b0384e0f056e10830c6226cd14ef3a09a4e02633b54477ed583a23a1dd5c965","ssdeep":"1536:N54tOnpWkMgFllpzLaDjEjSzE55Y4U3qo9cfK9L0SkTUEnbSD0nz5RshsAPMffkg:czqlpfGESzEoGucfKJ0TUuSD3h6fMEj","tlshash":"1ba3d067e861650b89e0136163a376b056351d8eb8fc2b376fc16d292b775eff032884","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.364068Z","times_seen":123,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/6.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.512Z","timestamp":1782537499512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/6.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zoZGgaS0tVCBI56zwVARg4srCMZ2tv4Km6JozEJ9lH7hEV7cBVf5m0FXZ7yY%2FvKmDP4E9G6oUkl9ji5L9A6BgoY7oYv7MY6gzQ81eC3PNl3MTtTGrJU9j7grHP7ZpS81cuK4LWHHdbcsrKVHW%2Fl\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 43120\r\ncf-ray: a121fd8bf98856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43120,"size_decoded":43889,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"8cedce167d37ddaa02f2afdf55841d8c","sha1":"e4d7390a8c3d30ad5f2a7bf31029d67c7f24b51e","sha256":"68d089ed51a4c939f3df204e9015ff82090ba99a1f137bd7ba795c08fbf057ec","sha512":"9122292033f407b4f5ce10651466e9cdc888ac0ec348764c905b631fb4e1f1b811f84880a87c84a2cbce18ebe816faa09f5ceb7214a8045e2bd053024d2c0f32","ssdeep":"768:/IjdA6fVTEv51JZP97aetLSXcQ4xtiMd5vGA:/0A6gP97aEQ7MKA","tlshash":"aa13d05424fdb88b4aa2ea323fb7b858ed571103c1810c62f1de58a57f193d89ce7693","first_seen":"2023-06-13T13:09:48Z","last_seen":"2026-06-27T05:19:56.367356Z","times_seen":123,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/19.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.580Z","timestamp":1782537499580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/19.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcyLObs3ZJSxawMxHmzAh0%2BmlVbaDKmFKQatbFECCjs9EtO6TMmsnwSNU1tcwsIvjU9%2B2KCOhGb61fvSOVUkvlv8cldW4q%2BTSpu5WaJJj3Y8pNQNSmYpyaROY2x35QElEIy%2FTWWycBnD4IVqZZC%2F\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 181165\r\ncf-ray: a121fd8c69ac56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":181165,"size_decoded":181941,"mime_type":"image/png","magic":"PNG image data, 532 x 532, 8-bit/color RGBA, non-interlaced","md5":"0b6b21e40acf2fa0f85d2c5ce38c4c51","sha1":"463e6dc3fbfd56647186a88f91c5e0fdcb310991","sha256":"25efec3030465e490da17bcd300ed058838410a48de23a3961aa8643eb04f2ae","sha512":"89f52681300ee295c4e054646c019569e33131d17bd84064026f3bfff12615946d48d6016ff434556aba3d22eb9735fecd3282acb4c5b08205889b3a67ff3bf7","ssdeep":"3072:Go+F53lwk3ysJzeBZnHg5Ngr5D4K+XZhz/Og54+0NGsICDmrBAgFCsoDe:GVwk3yOejnHgfg9aN/Og54+0g0ABAgB5","tlshash":"19042375f9438a36c483740797eaa19655a3be0eb75324b0a7cdecb46403ee90535388","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.364614Z","times_seen":111,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/31.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.626Z","timestamp":1782537499626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/31.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BPlHx7Ogy6GeGvJXV7Z9WV0WOcrv8ULohExqLc3zuafKCxhpH%2BdHpl7ouF8kz5U%2FrbFanITM4Wd0C%2FYdc6ivse7mOa6Sfg75ZVL%2BEey3WDp0WzBUIX6okZz0J9BI59kcQgeWgyN9dRCICetHQ%2FK\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 34275\r\ncf-ray: a121fd8ca9c656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34275,"size_decoded":35052,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"0d3474dcd7572ac2080b0f4ce632dfac","sha1":"6c9716438b8690da1cb705f3dec849c27bc173df","sha256":"1c48cb765274bf0e7584f40e711a70f41195d7ef972a310d2a86988856343a7b","sha512":"7a29dbf2bf90ec19b2f075c316b7ab15f7b2a4347b38bfdc49d9ec6bf3325816701235452a957b4f14dca792bc8784c9499f951d173011253665682861d0bc57","ssdeep":"768:fJ9NqbSLu4iWyXs4xdq44fWPNHdghn0UaBtSW+qRW7b6iAs1:fpqbSLu4Yl7n4+PNHWnW/+qRE7","tlshash":"6cf2f1f559a0edf59b494b73d072ed86e8f72ea436c2353d801003ab24afdc990c3a65","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.353898Z","times_seen":109,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/frontend-lite.min-1.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.978Z","timestamp":1782537498978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/frontend-lite.min-1.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRfpPacqNNiqt9JZONVaL77qvG884sWohG2b60DtJ0OKdufwYlGZah14bkKc6fQDxn6ddhUgI%2FylhmJEq3cygaGnGtUJla7PaQj7Uh5dlJCJ43S1IrZ4BridHGkNH8p1prZqOnTiW7qLdtZzSu5e\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:46:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 1391\r\ncf-ray: a121fd88993d56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11053,"size_decoded":2204,"mime_type":"text/css","magic":"ASCII text, with very long lines (11009)","md5":"60bbc1eacfaee6727bb7099bfb09d9b9","sha1":"8194697e1f796eb2badd12a71cf22a589ce309df","sha256":"e813e69de67d59e5314bca7ffdff4cd1ebf57fce9086147c447d6ec536707bdc","sha512":"ba1e2379b4909c3097a255e30c2648f71a5536eeb5003d14176af75c9462080af17813361aa41665efed876bdba581337902a4d36f5063c718de20c674f3ce2d","ssdeep":"192:IlCUn8qrIuqxIZqJIrqYqP3qYIYIP3IHq8qL3q/I8IL3IuqL3IL+q8IXqFqDqeq4:HpkSy","tlshash":"42325b26bd0b485c53bf51b7908b269c0a09c9cae1611cbdfb60650f41f4e89f3ba627","first_seen":"2024-03-12T09:44:35Z","last_seen":"2026-06-27T05:19:56.382626Z","times_seen":238,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.166Z","timestamp":1782537499166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/index_files/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJmtpUfCz0F0EDX%2FT3FJlaUzW961powSV5vjxaQrCX%2Bnx4eMQJk9HVHnHtrmASrfEiS8d01gGpELMVdT56h7Wkk9cJIzH5ZKkOxdWMfPFz8KhfE0ZebFsX0kpPYaeXenmx1AL1BL4ThBnTAgZGIW\"}]}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a121fd89c95056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":1934,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-30T07:22:50.33191Z","times_seen":137428,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/newer.json","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.263Z","timestamp":1782537499263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /newer.json HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allresolved.defisolution.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQIM7q5VEE3QEeNOu4HAgTowI6DajLfRpYM6NC91exM3BA7jbGvvyfyM1NH2J3aayj8JUQjUkY2OEtDikK2PiGTypq79YtQiKimxCuoEo4%2Bwq9FKQEuHb8cFqfPi2oesBtpG7hJ%2BKzIYwYweCqIe\"}]}\r\nlast-modified: Mon, 04 May 2026 10:06:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 1275\r\ncf-ray: a121fd8a695656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10004,"size_decoded":2011,"mime_type":"application/json","magic":"JSON text data","md5":"377b3c416812c7557fc3f686fe81f065","sha1":"ad041efe84b641adf9c345beeaed3ef171d6c929","sha256":"c5178b72814ffa82b9501ba45a49fda10d03c40c1c32a028964135530e4727ae","sha512":"8ac0355b48ae7f45092574ddd3b7320b3c1e58ee613f33445976417407f642912cf443180c5f2043bcdf166998757cdd148c7b84b01224c21ccc1294c08467c4","ssdeep":"96:/2VoDr4bX8KqvcOZXU2MnAPWg1zT4hpb2CJpHgqc/te/r0tullWm4xOZQMbg/viM:+enUhA/+3TN6z/X","tlshash":"db22aa95c6661a831d0d276439db21e2b5a043878e5cae387bfc1c587f8dd2e1837b6c","first_seen":"2026-06-27T05:19:02.455162Z","last_seen":"2026-06-27T05:19:56.471475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/polka.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.399Z","timestamp":1782537499399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/polka.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zUn1l4i75TTyTmBviSm2LT32nTf9wipzFEYzXqF8FJbya4jnkkDdMlrPyORVcNGbJKDOem5dtcRNNmIEhzgewkHX22XEYQf6JLWgAagXkcT4zN%2FDFk10aA1LmTOL7FA%2ByPlJfFcYL%2Bw3fpcFbhP\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Thu, 12 Dec 2024 01:00:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9955\r\ncf-ray: a121fd8b496356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9955,"size_decoded":10725,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"0018db5c3549ef1606f10ebf45fcf5d1","sha1":"f5618728fc9ebf2d504aaf05d783d34bd0e349a1","sha256":"17641efc925ca5c525a3774cd3b5344b11dbb442094da35d8014ec690c3719bd","sha512":"f9a13467a32fa31f0aff79586c09b72aeaee1807382fa6fa70bf8ac2d72583d6d5e6f9723ac240a91bc2885ff47303496274db54fda5d56844bb8ff42b1ef728","ssdeep":"192:iac3lKUwVb9PwWZWPAhPxHC1Z2ksk5QVtOuOKP+1OeEHJ1Vd9PylPZf:iTlKUwVCWZiAhPxHCqkskOVVNJv/Pytd","tlshash":"6422cf14a871d74bb32fe091a97843263de2725c698930d11eae082f160db6365fb70f","first_seen":"2025-11-20T20:18:12.917123Z","last_seen":"2026-06-27T05:19:56.452819Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/96.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.552Z","timestamp":1782537499552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/96.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FqDCYApjZDBYfWH8ZsLYvMmjSr6UIYO2Mf8RbDfY6BvR6g1FOmuy4Ba74oDChIDuM0zGgk%2FZDlP1RggKku7MwksvK48xJZwuj3jHwCT35Ei1L2Z4ggB2ZYlSpOe3m5bqqAL19i9NuiXI7kk%2BqoG\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 7953\r\ncf-ray: a121fd8c399d56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7953,"size_decoded":8724,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"28244f69b07f703cbf789fcca4801da1","sha1":"ac2a0904a0680fc50d51f9664db022f446df4678","sha256":"214c26185584c478b1658fa73348a9ae2b092dc48d3fe33c86560fb48cd524bd","sha512":"e7d4c44648afc01957d485d88409a43954bc52cdd66cc7e918be33dfcc49112179a12ef63b48b077b098a81fa41ed307b3c7dcafd8d23597b92753b0bce3d778","ssdeep":"192:v9hhhAgAAX1cJA28RVQcF0wC1nQXYOLsFD0Gcymms:fh2gJ+JADVDFrds27yps","tlshash":"faf18e0ff1d5d190fd98ed31202b182933774a0996aabe2d26d5d607bb610f0adf806a","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.408471Z","times_seen":49,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/rainbow.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.596Z","timestamp":1782537499596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/rainbow.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nv%2Fc8NoJKuIt60QtFVsmYAI9SvkkkOZw%2BdIqIKmdi2fGvPcRBDuMMlbSWNhD3eX5eXsu%2FdnET9MJ1kOaOqTuXVDmwmQxs%2FSSOYRcRT8D0QlgT%2B9aIvvBkQCQ7%2Fww%2FcXFT1MliF2vfMBmYhjr%2FhvI\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 99346\r\ncf-ray: a121fd8c79b256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99346,"size_decoded":100127,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit/color RGBA, non-interlaced","md5":"207dda8d66f8ffc00a21e4fcc5ce0a73","sha1":"843b56d9bade9830eba97f866f51f60e4ffdbb18","sha256":"119800ca616d03ffd0e779b3bd0a8c304764a041cf2eb45cb7272064b07e4015","sha512":"9c57b40bbc4238c6ab6b7e33f08a54b02696d48f24c9e6258a33f8d4b6173e407bcf1dd26c2f4323579d92515409c3c423d7b2388678ae1f1e860cb0d90a2d97","ssdeep":"1536:UKI7A5movk2IYSRcMSZf1OjpBuAra/ccsqjbGdijySYwhkXHzoiykWUoRT8X4HR6:Uv7A5Hk6SRsZGBslfiij3XhOHcJkmFLo","tlshash":"2ca31227b0ca2fd5f41e41ed044ed268a0c628b6f556f3f5e954fe0f261a1ac7063ac6","first_seen":"2023-06-06T01:48:25Z","last_seen":"2026-06-28T14:13:05.098837Z","times_seen":166,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/frontend-lite.min.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.973Z","timestamp":1782537498973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/frontend-lite.min.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GlM9JXLLsuBWdYk2Mwrjh0dzszAX%2BR2So%2BsFdUBcCHnKr3CJKjyZJAu8XDW5taaGNqjtu6oXtyCXvYeVtXBfOyR7HRkqcYYkG6fY2DdZ8cQKHKd4SrwrRjSvQdBOLvEwMz37uFiUvn5zJTe03Xr0\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:47:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 13014\r\ncf-ray: a121fd88993b56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118630,"size_decoded":13830,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"06be0b21dc152604b174d6ff7688d568","sha1":"d8cb5bcc06a447442730f351521e472ca53310e6","sha256":"c400284ab75d0086e3cd071b699c581468efa2459272226894ebe56ef4094404","sha512":"4e487166c6f87cbb568fa98d1e45fbe739ef15837ab18cf02473de0a9003de098856026e640354831f5a636fdd107562d37c0193bcaef43ce8ca3d2db0ecee7f","ssdeep":"768:7GnP5Kb3tgnl6T5sZQ8tQfJjCqn/0ginSla6T8L47YwbuXh7+:7GTtQxWqn/snSla6T8L47YwbuXhS","tlshash":"1ac353923d07622a662f5e3f4a87769c53a445c1da437ad6f442c413d2feee1372a823","first_seen":"2024-03-26T14:00:23Z","last_seen":"2026-06-30T01:43:00.809241Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/91.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.486Z","timestamp":1782537499486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/91.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=265jWzkzuD4t1xar1NIvXpmUr%2FH7xI0vcn849OaXPcgMLv%2F%2FMVwg33r9TesrbkkzV%2FvGLhGMRhe8fWDXy0kTmmLFCuw5Pi5I5aEv0Ssdzp3KAIUcC6pv7x68AqkkBSeyW0VebTF5KmLAySd5Nz3R\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10771\r\ncf-ray: a121fd8bc97956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10771,"size_decoded":11545,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"a4fdc02452b1eab67ae23915d2ede36d","sha1":"3e419ca025ec2e08e87701ad47a1b3081336a003","sha256":"9e44c6a82a2679293752269bd4a45fad12f221e0b176d0efba81245138684e2a","sha512":"16b8c26b6fb737610f2e030315e42106e1ac00b952557775d409d573e481a352d19a9362ab45928692990f421d71576b634408dc203b3180c60c3b529bcbdc79","ssdeep":"192:+VAzKgPqaltGy3gXHcXKNJ6VaXFChIDEG17xFf4M8m+CFril9kqGCKu5yEzoJGUy:+VyVJXGy3gXxCVa4Gn1tFwDCxil9gCKK","tlshash":"e4229ec7b2104b44eb87df3f2dfb94c2e274c225c4b1856d57ca0cb817e08b69d215aa","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.373524Z","times_seen":406,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/halo.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.517Z","timestamp":1782537499517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/halo.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVoxPtNQ43bwqOh4kTdyqt0J%2Bsqq8TjgaTt3%2F1vef3HkNk0JIcAvamdaxMKbZnTMQnQ2g%2B3AXa9baBdpJR7txXl%2BexoYdOz%2B2Rd%2Bg4EGFe4ojFWcsk3ct0x8dD4FhgL0FOjyK6xKAJzGxTVsiJG2\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 8812\r\ncf-ray: a121fd8bf98a56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8812,"size_decoded":9589,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"944a96739d557c5fb713af16f19c58c2","sha1":"391fbf97e99fb61e4511c9fe2adff26febeb3787","sha256":"6aaf33e20d2f5bb514ced30c1367b895a13c3f5c1380618970cf06cfacde0644","sha512":"888992d3a25b4649d9121678cc166e95870b5543d806f8996e686bf227c430b0ab18eb2a64d331d06b573531d89185e41579f076128933b543dcc724402a84f8","ssdeep":"192:s4ra3M4NK5XORnTD+d8bRgpsDvObweaAqwQQQAK3/0eH:s4+vK5XORTy8pdTzQM3MeH","tlshash":"e6027bb39691da4dfd2c3b789184933af7452e21919f2b39b702423e2ffe483590b445","first_seen":"2024-01-08T00:36:03Z","last_seen":"2026-06-27T05:19:56.350045Z","times_seen":33,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/image-2.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.185Z","timestamp":1782537499185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /image-2.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHrNItGANckF1SKdWI%2F88Kwq4F6rq47lo1aRGjDVyQbVtSVxyJES5QgaSUjrwcmHLeDKsGAI4qHcwYQtxiRkIq02fO3YDznPXErL3zsgQB7tFxplwbumUMoUoxUxR1EafnmNy2UQ8cThcXZCqK9W\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:22 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:50:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96535\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 120190\r\ncf-ray: a121fd89e95256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":120190,"size_decoded":120958,"mime_type":"image/png","magic":"PNG image data, 860 x 860, 8-bit colormap, non-interlaced","md5":"d59dbec506ef7fd715188b431433d407","sha1":"3c55564827a0687d49ec073b80099c4ca1016360","sha256":"38fed24d65758c3f1f84a8431296849b2296c08d87f6e74fadf40965f8b5ac6c","sha512":"52b513a0ee27ccf4ec500c90504fac5c94571d907db6be9c084d7695cd0db325c68ce36a30070b8bedec92b1f34301d5f7ff978cb36beb08352001ddd8b2eee0","ssdeep":"3072:oW2mJXhbLgs9u6RUAhGYyYjpogk6unbTuUst5E1t8uyeR:oIhhvz/hGYtpE5uUg60eR","tlshash":"bbc312d4e8cbaf50d0b79801657b84fde961ba9d56123ec9eef6c604811f3ad4903382","first_seen":"2025-08-16T16:57:27.99057Z","last_seen":"2026-06-27T05:19:56.363416Z","times_seen":10,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/39.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.519Z","timestamp":1782537499519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/39.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3VysflplYGrU6rnvkyBkTokBSjKn2E6n2MS%2BTC9tW9HoFjNf6PeFlKwYWVbzHSMS7Cw5mTiuk4vy1o25UUp8bN3NX67S3p6DmRlfClrLrs2opA1TBGf1kk%2BXAOLaPq2zPRJbUJMljC9JCj5Rza7\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 28422\r\ncf-ray: a121fd8bf98b56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28422,"size_decoded":29191,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"34de7320d914800bb25423e0737c09fd","sha1":"3493160cd4d056e2b9fd302f397f66eb6f9f208c","sha256":"410ca3f041808bb541c6b8e4702185d3e680e74cb5d188f7418d588a6f2f648f","sha512":"0581aa2cab9b88ec9d1dca7d7d5cbf09c3cdaf912240d7629035943c0d8c50c4b0cc5ab9328cf463d1ced3566f319db7f9e76a7cd7635e6aba5a71bfd19ffa3c","ssdeep":"768:+FDh254ZS3a4Sqc8Sfz6ykdgr1DWr0/xMxlBEM12X4Nc4vvw:Wh2oS3a4SqReXk+a0/xalBfhvw","tlshash":"5cd2e12749edb63ac045b78596167c2aca30cf5685aadf8c958ddc0056f0ff9e39cc42","first_seen":"2023-05-04T14:12:02Z","last_seen":"2026-06-27T05:19:56.414689Z","times_seen":97,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/morphis.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.560Z","timestamp":1782537499560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/morphis.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUylzxpyuVmbuGndmJaLe9bbu5mKkF%2BfAsxc4Mm7Ic6ex%2FP75zYo8Zk%2FTBMNqgv%2FA%2BJjf3BoFk1FSDAJ16WIjjEKNhk1xc0PxuqN9kqYdgIyrqpi2vM0wjd%2BLeuge3Tjt6wCVd7zYfOtoBR7Cu1T\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Fri, 06 Dec 2024 14:39:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3085\r\ncf-ray: a121fd8c49a156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3085,"size_decoded":3861,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"1a09293b31392c6197d3fa5aeaa1c180","sha1":"e4e354c7b70b5efa7da292e4f19a445328a1ba40","sha256":"175b27e68e17dbe66ddb29d314cd9c4ab1713a904550b8844122c17c1d567e7e","sha512":"e40a4345e9c6dbf11eaaefce2251dc81c043200637bab6f8d271a10281fad1611715d62dfeda6b6662ec8c467cf841a2c94090a186093e2dfbc7f0f7de8d6dd9","ssdeep":"","tlshash":"a3515ddf7c8b8e2d025de2cbfa5574e761312d94e2073b3ca92a6d57c218f2396242d1","first_seen":"2025-11-20T20:18:12.895567Z","last_seen":"2026-06-27T05:19:56.354488Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/nightly.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.567Z","timestamp":1782537499567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/nightly.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65IwbmM6CfNyi3AqLJX5LWO3s6a7LlEcdKvpOh7V9%2FSRln%2FCGXdk7AX8QdBJ%2FswOrpIJQ06R5ppax6G0ZkjKCNgz%2BxnTupjqhpyIjOS%2BavCpjMqmj%2F2v8%2F6JRLASWraGLFGlWMF7rxoFpAiQwA0Y\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Fri, 06 Dec 2024 14:39:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9628\r\ncf-ray: a121fd8c49a556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9628,"size_decoded":10406,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"52cd49afea6cd4a7fcf863910319ea5f","sha1":"acb658a6a8357702638ae0a5d9301f85d7fd1336","sha256":"dc9e63caef450848d90deabfa95d9f804ab5fba8f0bfcefaef359d1ac342ce0a","sha512":"60902555c3a7c0aba054f5305ff52d75132d7ec01a0cfc1ae15668a8b67355fa949db3965a7c4884c9888b8b6b52561272b00d2225b39508a685dace237dc49c","ssdeep":"192:ky2W45hpA2zND27DklQExH+jU9/0NXCQSCBnALuqeUUXOF0MsQoU:ky2W43187DkBt+w9/0xgeU6uZsQoU","tlshash":"3912bf306bd51b91a4c882e9478e0747bdf27e06c47d1c802b251f72ecf8ca09b2f266","first_seen":"2025-11-20T20:18:12.803204Z","last_seen":"2026-06-27T05:19:56.384415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/78.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.422Z","timestamp":1782537499422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/78.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEKwraFC%2BPBLSP4a00qL4qjMhp%2FYCyr%2FzW%2FOVnPcGWRBZ2Rki29wh14DDn6tnxgxN2m1JSlQLCaVA1hq5v9VAf%2FazKV%2BbVGTiZXEYgVglFNuVIJwVgOXn9TyHf8suBFsw8PeC6Ry%2ByPwmhz%2BnlrI\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 31255\r\ncf-ray: a121fd8b696856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31255,"size_decoded":32037,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"b0dc5cf3cb203b6252bf7ab9b4358948","sha1":"6424d52a8f2bd7eeb7783b05afbb1e4bd6ea7b50","sha256":"8afc1c1288b017676b91561819f6b76a011a873aad592ee51cecab4ee36fac84","sha512":"53f4bd138b0bbd26df122ff82c0f408d2723cdd78d6f5431f302a83d5c29a6464a47aab58d10ae5478f0332ef08486d23564713ba516b5b9b17831ae30666cdd","ssdeep":"768:cotjkmcWCoWCYl6sCrrMAPSV3gwjynHGaCuJx:FtjPt/WCZjrMB7IGaCax","tlshash":"b9e2e1bf759c2809310bb128d4cf1f31d52472161eb81b2fb496f56c4a1688181bc63f","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.351866Z","times_seen":345,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/imToken.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.526Z","timestamp":1782537499526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/imToken.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNvRU1OeHwABu2oFQ1z93gA2E7p8GSkjBP2qD42MKvz3u4IKdMNcPUKSzSg%2BxiiPDBTogstXYDlknwT%2FPgS2bzgPn7ZL6rXVNhsE%2FxQhnJcWbr0tBBJ6FY41p1BiDq5nwarQP6iYAznKt0f0XizZ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25800\r\ncf-ray: a121fd8c098f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":25800,"size_decoded":26571,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"fd8c7c52dac6101568954e7448a49202","sha1":"01aab5048325e87f098756ca52138201372dabc8","sha256":"b6661904fbe221c257c81200d66e215acd22078f0d8129c488a26cf43d30d620","sha512":"0f23ff07398335869f127167557f027f2a4fc9dac1752a0251b15d4e5e5b1985c3e2b82c958325a8b9a9478aeb1d1b1e69fbe4b9a40130ac467852fb262c3a65","ssdeep":"768:T014aqA5hEqKQLyLl0CHvAKyO5+daYDGii8:TE4yhkWKyO0nb","tlshash":"83c2e1872ce44b7383a364df026712110e052f736e47fa9de0951e0b29367d26b9ad9f","first_seen":"2023-06-13T13:09:47Z","last_seen":"2026-06-27T05:19:56.346402Z","times_seen":108,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/css.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.985Z","timestamp":1782537498985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/css.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwJlW1MOTr04CzmyHM31XccOkFP4JpVF3HQWyxrGONiXmLHw22nSrypq74y7oanRhbYv1QP0GAZ6ozofXOShs5lqhqJwdKwDlC6S%2BUyf9ldMWwqK32hZT2ida1FbNlfOUAMJx3FPyn6Tl474QsA7\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:46:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 2329\r\ncf-ray: a121fd88a94056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":124340,"size_decoded":3142,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"c5e91e31fd53da312dcafd617fe94090","sha1":"5c3025c55cbf60f35af16dc395e880e1de1c816a","sha256":"6c4d1f57881007a6108ab1363cb0f82ccb8059b13064d686e67367908b22bd9a","sha512":"5f0b0fe336244f16127f887dba4941c3228713a7ab719849d78a14030841e9fc1c04d7f6f855f74024186ede98e4b3f6ddc0f13c79f460ec384dcfe5b31f6f90","ssdeep":"768:tlXRAgBK4wBmK/rIxrOJTnAxljiBHnUl54LBw4mLWS3OHxVAbT9i3lFUzHUh6P8K:WQZyrMleHmFwfaRs7Gn","tlshash":"7fc3d990042b5000e7876ce223ce7f36fe4ea240b145d938abfd575badcada562b535c","first_seen":"2025-11-27T21:31:34.806035Z","last_seen":"2026-06-27T05:19:56.413457Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/image.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.149Z","timestamp":1782537499149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/image.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/index_files/post-9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8dRJ%2BxVevS4eO6tfuL26BwkZBQY9pFXrkCa4gOCqA1cC%2BC53ZOcTtrI4YlUZrQGJ6%2Btxq3IIULWGaKDSFGFkZXFpvybtG%2BzUn9c0jQxRFmhXSSXweG%2BvrjFolKVZ%2BqOrJOAJtN1yvmllZp%2FNqvl\"}]}\r\ncf-ray: a121fd89b94a56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":1466,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-30T07:22:50.33191Z","times_seen":137428,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/Argent.jfif","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.404Z","timestamp":1782537499404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/Argent.jfif HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Mdh6FZWYnayujYQ7v2DzYH9Ve7IfV5jG%2F6RHRvHcnmWXtpJS3pdqEjOKmC6ngIM%2F4laeXc59lkqMU0KkvTk5ayw1KJHWFKsQ2Go9ifA4M6WYqyYB3iMcq75F9EAaD0IhYXcxHn5LVWU7bSgAZ2Q\"}]}\r\nlast-modified: Tue, 19 Mar 2024 02:00:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2872\r\ncf-ray: a121fd8b496456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2872,"size_decoded":3568,"mime_type":"application/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"a8af56ddd09bf7be493fc0cf60f49a34","sha1":"88e4849039e3b55ac1b1fe18b94bdabde771d494","sha256":"f15e7081b4e4bb8fff620e68684d3f7b2f6ad5b10bc2784a584d51f22a2d4131","sha512":"f95852be86d995af17ddf110803178df063a5200c51cb1cefbc9f3ade8202a9ae9294fb92b668fef7dee28fbf98c42a829bc0725f4cf5ae4d338ce5034825bf5","ssdeep":"","tlshash":"a2513d221f17ca38cd09cd7eb129a9bdda33f7e299240cce7084589580f14becd1da22","first_seen":"2023-05-02T01:50:27Z","last_seen":"2026-06-28T11:50:27.570881Z","times_seen":397,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/60.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.476Z","timestamp":1782537499476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/60.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8pm7QUBoiTeFea9ckolx5ZtWIWG%2BQ%2BBZiSx7OqGyj5W5pBhr7Zi4wyzN9P%2BbsDLeKbYAuaD5Ru2E0qtyE41Q5M3xAH7U4q14kbjT8bn9Nd7DI8ogfA7KKw%2BW%2BqpMg854L%2BEC1URKQP%2FmOD0gMNpq\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6180\r\ncf-ray: a121fd8bb97556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6180,"size_decoded":6959,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"bfa1d86168d24160dc6f2e3fbe6212a1","sha1":"980ae5b9d3086b102b21c0eb07f294ce53f2e6f2","sha256":"c28c36c68c59b7c63277facc1970698437d6dee2c69a2cedd55a7b5a5ebf128b","sha512":"088172815022c4f8a9b3f7ea0d03b7a8d53e43483377e9b22f03ed13f1621a7b8edc7778e45c6e817df8dfa4a9c62226b92bad9ad87ad788e7d40c17c5ec47b4","ssdeep":"96:4l0K3jaC+ZnfE5fjnB/1Te4vxSangdZ3aLMPhhQmVqai5zOEtU642G4t:4N3jaCiW1C4SXdt5PPXqai5CEty2G4t","tlshash":"33d19daff1a00b91feaecaf252cb32a5e761393c3cc0c6adac5f954097771149180e06","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.365663Z","times_seen":91,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/69.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.481Z","timestamp":1782537499481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/69.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VlPBAvCWsXqobXJ5C2QLQPi2uJoRoQKurZTt%2FkDJ590DP%2FRh4Na%2Bgy%2BrlOzZFTJSp0CXfhRU60Fobbqf9aK0yZz%2FgYf6%2BItYZjIGw0nwlF%2BKobtraaeymj%2FkQG7nZtsVOGanZJQnr526g8aV3ubq\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18581\r\ncf-ray: a121fd8bc97756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18581,"size_decoded":19363,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"92a56d92a1c7036344973a734d5e9087","sha1":"a7eb52d0e2eeddcb36583cdf73b3574ee8251d6b","sha256":"53257447953ea24d6116b57001615e209d0c59415f13f88f868135659c5e7f2b","sha512":"d6402d2d7e45e564b227f3be0caf7742fbb9fd2bc5631b6ce70695090b911e47e19418957e4bf4f1ee30ab2ce4c09e3e8b399221ea17036dcb6f2903cf26849c","ssdeep":"384:11uZ3hoJU0TigK2rQemXWaWX5Mh2QfOdUN88RCyhs4O5S6OM9aDFTOG:1El0TEBCXrdU+fwySc9GtOG","tlshash":"d082c077f168c61f9d43f232fa5eb1fd6497244f6095e708c08eb94270ac1982a3e65d","first_seen":"2023-06-18T01:03:15Z","last_seen":"2026-06-27T05:19:56.36622Z","times_seen":81,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/33.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.489Z","timestamp":1782537499489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/33.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDHR92CJjMGL1AYMm1F%2FUzEdOVpVgng%2FAj9HntVA2dFLymWk2KHP%2B6Yp9utJrbJu%2Bv2Sub7eTrS4VOtQQu9ur3waC%2F2zzeoyleat1wIYZkpOVEx0ghjKqv%2F0Ik08aYzoYyrzbDE6Ncae5vRl5pdA\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18702\r\ncf-ray: a121fd8bd97c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18702,"size_decoded":19479,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGB, non-interlaced","md5":"a32c522e109217cc2a1a2a310f3c9bf7","sha1":"485c5850a5db59ee23828b29a7996c06f6e9fc33","sha256":"0e217e24cfda05e77eb56b7ff2a0fd53bd286db14f012f82e30d397acd68d7fc","sha512":"f0aa3050a9e23a394392deb74883e6d741fa1846f209c07fee6051012c88af6eac95bf0f64ee838433d6b231a7460a2d74001a6304cb4b20e5356b8027a0e3b2","ssdeep":"384:ajCeU1TNbrlYGRCH//6iPB+x/va9funE3nQX5wbzN+5dIWu2aK:ajoVk/J7xq5wV+DIWPaK","tlshash":"4c82c0534a8ee644f96832b716c2ea04c7371c639d5bdb0d350c9427dba5d84e9835f3","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.389192Z","times_seen":109,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/enjin.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.499Z","timestamp":1782537499499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/enjin.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcX6Sh7uU63dLT7iHCq4m4lZHNNE%2BjvkBv3PgDjYPGxGlF2dficMZw%2BTPECrj26X6ndR%2FnQlbdkmHLw6X2w6IOX8DW2AF5VsUM8Iu3itxis3VwwUMVS5rijVhPiuns%2Fnf9%2F1uW0b%2FqpC%2FcZDkKaI\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9809\r\ncf-ray: a121fd8be98156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9809,"size_decoded":10587,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"8c00c55ee3890c59077a9d84cbaf5c5c","sha1":"3dc5263bee0734bafe6c93665aab4bc7f80c663b","sha256":"e5fe14c655a6e7f7c710eb7868d2d1c9fc121b0f718bef3c286f57fd81e84157","sha512":"a3ed9d9a29b1b838cac2bc96ed7e2c0f0cf4a97650213b99e1b2fd0329a598d5a3ba3e37db012403d6cc1c0010a53ae390558340e21ce394c81129582d93353b","ssdeep":"192:WS+kn919eXL/dsaMvUHlzhMX4s41Sp6HHYB20S:5Vn9beb/xxHlzhVs41oK","tlshash":"ef12d6deb351dd38ba2ca50b696d133a04f7eb88c552909758d30c5e38762ec8f0d39a","first_seen":"2023-08-13T00:53:13Z","last_seen":"2026-06-30T03:06:12.724066Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/keplr.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.537Z","timestamp":1782537499537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/keplr.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAWSf6zBzU6N5Q7b36c2XqZj8bvh%2FBGu%2F7erVX6D5B1lYLAMlw%2FrCfVHZ5kzNAJYjhvcznFyXuyS%2FuNheTCZqNYee4EtlMQv7jwAM5sPSzgomBCCaeELsOlzrVs7BYs%2FNVV4ieg7a2TdpgvRFH8K\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Thu, 06 Nov 2025 19:14:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 52866\r\ncf-ray: a121fd8c199456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52866,"size_decoded":53641,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"e1c1b8808492dd9c818637a2bac55692","sha1":"492e55ba5dfbbe0f6a86a80a92b80927c1722646","sha256":"76a331bc3439ddf76b12bd95911b0121e6c7a0d96d42282dace8711ab89d88b2","sha512":"f29b2c34abfb7a30765d5117ac7a54070665cd5119ee6e28e964ba248bf1aaaf275240a5e6da43f6aafa3f20d702cceaf3b16b48b5ac029d6b38783bb740fb42","ssdeep":"1536:L3hRt+iwL3IYOLS8KKTenLcpazg7RcLpYH:LRRt+JLYlm8KRaazg7RcLpYH","tlshash":"f43302d2538633eaa0a393763992b3738a7e6321092fa443489af7adde308ec9545011","first_seen":"2023-08-05T11:19:00Z","last_seen":"2026-06-27T05:19:56.427725Z","times_seen":208,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/overlay.js","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.970Z","timestamp":1782537498970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /overlay.js HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuewUWKlRnJwd5eSEmNUc8c9DT1T7AQ5VUmw7PtnITdZ%2Fk2A8jm6gBoH%2FF%2F3t3dH9f0eObaPrMM5dDdtt54aXLGiBey9uI3lnBFxRoMiGbQwYPHqc3MCMVQHhMNrXELtY9Ct4j92Jafn1vCBV3rp\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Sat, 23 May 2026 09:38:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 2522\r\ncf-ray: a121fd88993856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10701,"size_decoded":3353,"mime_type":"application/javascript","magic":"ASCII text","md5":"5de86f18326e87f5bb09171586625b01","sha1":"e7f79c742d553a90a0d9f948374f5120798f332d","sha256":"1c5f9cad47d94f04a535b51e349df8e8eb85d7c7854a0e38c6aeeea09d96aed0","sha512":"4e0108f08b294549b0291590d567f5cfb7b78e48fab9b26149f0dad0087b965b44e7076cf67d196e3439dddb3c5aee2b04fe0172c17c45e03670617b23461b91","ssdeep":"192:BGCWMUfUSU1JN+yvgmjEF5PLiOi4G+ygFCWHict+D7FzFrnBUr:cCWMUMSU7g+EnPLiOi4VD+l5rBUr","tlshash":"ae224218967a163401b783aba3c7a7d96621004b7144ca797fbcc74a0f90fa195f73eb","first_seen":"2026-06-27T05:19:02.491767Z","last_seen":"2026-06-27T05:19:56.347432Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-27","alert":"Detects file containing Telegram Bot API","trigger":"allresolved.defisolution.net/overlay.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/index_files/global.css","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.980Z","timestamp":1782537498980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /index_files/global.css HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llamS9OCdxFWV%2F5FJbOThqTHJKBivhWN%2BNUCBPaQYkq3%2FjqaV3R1mlWA8vWblm8Fo%2BZI9JtJC24zGdktnPpPDxt07C7NxgalPIwCcUVRZ1JGVuWSLFW8thrSzuNbC6s7wL7WqVHT4NS1Wr8u9T6K\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:47:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 2685\r\ncf-ray: a121fd88a93e56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":40821,"size_decoded":3504,"mime_type":"text/css","magic":"ASCII text, with very long lines (15910)","md5":"237fd1c26e91eb1e202379af615d61bd","sha1":"f6e0aff048843523ba983bd8839729eadc80800f","sha256":"ca74d842e703dce637cb7851b491cecf165473e3311f638809284442a1125c45","sha512":"e482c5ff83066e5ddcabeeebe571bdcdfb36178826724a00ff96f2b04f4aef27ff1534cbd47f1c6edca16f1cb5f92db3f4a35bf7c1c4892a10bb43339b40dc0d","ssdeep":"192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6It0eyBrrYjBcD0NS6H0S6MSH6Hv:QqRDrWEx7F2OUT","tlshash":"9803e6887827d126f977046f758ff47c181ca4de5c4bcae7f448860689fbf2aa368614","first_seen":"2024-08-20T02:28:14.778832Z","last_seen":"2026-06-27T05:19:56.372335Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.260Z","timestamp":1782537499260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\nserver: cloudflare\r\ncf-ray: a121fd8a695556c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T07:32:23.926072Z","times_seen":16850090,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/62.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.420Z","timestamp":1782537499420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/62.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKLNyEEMMr8gQXlwOSjGAgyvLne3Ke%2BjiC8DkSmVWrrXtAdn14EEFyQmiHKDtGqzuxV3q3FcYd4MNYr%2FpLkSCAcVvGclr5BB0mCOItwm%2FPYbQoOtcCvGP405LjrMbDfZKtYYJ4Eyj2yxDhyVOVTB\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10319\r\ncf-ray: a121fd8b696a56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10319,"size_decoded":11091,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"f4016f90d28f16b8d8ddb5b43057d970","sha1":"c8812aaa22d25ac05b15c52c1e0f62591d1d99ec","sha256":"62b1ce9a5a02e192551cb6a63856b70f1d18ceafffecbdf417bc19dd0c7e42a4","sha512":"6dd8582849de8a7d552b166306d90e95ca2d21ff8e45d21f397ac14eef308f5670443f230c8927c490fb89fa80bc0cded9bd0ef4adcf334a86c7bb9105c519c4","ssdeep":"192:YV23hajlQlzMcWVsKHqYYg64hg/p4cdMTWFX7qHNHLIs93qc73J4:YgxajlrcxKHGg6AnMdyrF93/7S","tlshash":"a522af4724804a62df42cd78f365c96bc70f727d9da7800d0eebf4889499cda8f52192","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.423378Z","times_seen":92,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/15.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.563Z","timestamp":1782537499563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/15.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpoU1qVSZr3OqfTYb%2FluYhuTHdbHRHWhHIux00WZ4QQ05hliCyTmZg6i3rycHtKTeh6rlAJ84c7bB3Hi%2BWOQKMHwTITqwAD5Kay9iQjfj8BujHgU6Cj6Fe5wv3E3ciZ7%2Fzv3%2BEZQo05T0uExQJKB\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25556\r\ncf-ray: a121fd8c49a356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25556,"size_decoded":26329,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"7419df5270c0406c80cba19fa5165923","sha1":"9822863d6950887206353fd1d87de04afa7b1544","sha256":"6354ebab560edc58642eed670c95d03b3b6617963d7f1ec6a6db9756058b35f1","sha512":"20c897965d87180bce63da89be6be0649ef1dc020d16c790ab47ea0ad75291dec17f36169bf859f7498493b9b4f88b0105dcf2436fdc6d004970095bfb3ffa42","ssdeep":"768:lNFG1DIbgjT39LB6x5GvzaojB78tz1iAWDOD2:lLo9H39LBcGv5Itz1iAWaD2","tlshash":"74b2c048a9c536c4cef48d3243aa00b71cc7d9085b6b7e92f48668385e95f0da39e19e","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.377535Z","times_seen":111,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/29.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.587Z","timestamp":1782537499587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/29.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qMqTLVQsX1%2BFk6UfGGNxBk0Spdh1DimnOknnqhpWjq3dZsUGJ2vnsuB4ZHKhnMS1p%2FeCR0Jq9Bc5FsoI8RiDCh6RFK7yweujRhoUtTxeHmFxIHio4idMcuA5uNMAF3II1Nd%2F5ZTI%2BnxCZ99ShnLM\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 63019\r\ncf-ray: a121fd8c69ad56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63019,"size_decoded":63792,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"2e1d4f97cc1a737a9aa765b3748ff315","sha1":"fb50c327a7ba61b61b9cc821b6137ec58552f459","sha256":"897be1cb64f7cac15ae76fdbec5a5ba4bc7c1ab0f8ad7c597a6cbbd1f8971b88","sha512":"c140c7f748581fc5ce0f396dea09a411976a5b303b96cf9632835a3b8ef0b349e87401f12a974ad94c0607850e4aba4ddbf510ed3b915bbb126d269c6bd0f8d9","ssdeep":"1536:RpU5dWd2EGM92DKS2HNiUxphPFmwZ+8VSY:6d6dFYUxJ+87","tlshash":"c253f22eacb035199552ec753a986b0396096eeb9d518c1ab0ff90f17f25bb21c0e354","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.353326Z","times_seen":109,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/ronin-ron-logo.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.597Z","timestamp":1782537499597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/ronin-ron-logo.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsLKtmFqinrZIooBItOQLVlBtIh7gbBiGUrPmnR91WEGWbddpUBFgL0p7l3CaU%2Fi9KwgB96l%2FLdRn0XwbUkGwUGnXxGe59A5H6IkSos6OEasIQrWM9naWcu4emN3KxqkDGZO4lFQJBHqyf%2B5lMTi\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:36:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 218468\r\ncf-ray: a121fd8c79b356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":218468,"size_decoded":219240,"mime_type":"image/png","magic":"PNG image data, 2800 x 2800, 8-bit/color RGBA, non-interlaced","md5":"6822d9e81d9a741b175a59b6579c71c4","sha1":"dbe57238453f4033698b93657db5843adca6df2e","sha256":"4483ce800729f0ac1280a6564e3d0ea3d1a3d5987d606076ec14fe2900127041","sha512":"a4d042c69d337b9ecf95623c5d6c40b395cfe6c711a655b2e10bf2462f11075dce7f2cd89cf5ced84f6d56927c72d9fe5072f2c78689142c76e02befb8f42049","ssdeep":"6144:EdZalbpVc+0r9YnQdtCamwvKliX6mD0vGCJskDs:EdZa3A9YnstzmwvCIUY","tlshash":"9d241668d3519977b70a0928f4621a2319656dbb3228ce1a20dfb40f3727fb05d3add7","first_seen":"2025-11-20T20:18:12.833287Z","last_seen":"2026-06-27T05:19:56.444456Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/17.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.637Z","timestamp":1782537499637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/17.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BmJtbE6VcmA6acO5%2FUWAWBvCpiIqcld8b9u2gVRJ6AOwNdq59E614FJdQkCRRGqGn1JxU9zZm0cvaGGBlQNLaCNvRn%2BxMs3E7aNOddl0qGXrOGXjSVZVuvCI85oXSCkBlm%2FdWc1%2FRjb1kj4%2Fsmu%2B\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 12211\r\ncf-ray: a121fd8cb9cb56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12211,"size_decoded":12988,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"198f396de22fe25eb370f46544abe69d","sha1":"8fa7e11800fd758627b6d869c9259b0ee05ca414","sha256":"11ed971f5c372d4df1fd942d0a57eee64456a1e27dd2de4036515c4634470ad8","sha512":"d28360bf628b836637d7e474b593b9c712bb64a0be2c01198c2222c377cf012503c117c922c20a9699035bc6b84b8282985d3030a8d1b8a3298898ad482c721b","ssdeep":"192:BzfTMdrqvrnuATlvm/T8JeRsLEiAltCkW88IbkZBiNlsnH/WVDjek1RvZJHIg:1LKrCruATuTe4sLEOj88ZZJ/W4k1RrT","tlshash":"0142ae44340daf2a9f77d7a9347116f31c6de6a10273f8daa8a51aa66c0c83ff580785","first_seen":"2023-06-09T00:08:41Z","last_seen":"2026-06-27T05:19:56.371265Z","times_seen":112,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/7.0.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.966Z","timestamp":1782537498966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/7.0.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allresolved.defisolution.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Tue, 02 Sep 2025 21:02:06 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 4601\r\nexpires: Thu, 17 Jun 2027 05:18:18 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZ4wWMbjqC7mP5UquIY2ZPmq%2F8JADQ3Wzsl0iX3mq1lY8nWoWdZ4FiEYTYYLxxEUcBcF4IyU1xIJuc4xLI3JQ1HghlOjaVUZZPg3ydLe1ETeDcPgYmfMJ0FTasswTEN9x9dscZBE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a121fd88ae164e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74320,"size_decoded":17645,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50205)","md5":"86ee6b865559e5b5fe6880f106961293","sha1":"6e43745dbc2cc775a84fc127884a106756cc374c","sha256":"f6c5904966ef29cecdbc1d8d87240ac0fd595532db6475143e0e220924c688d0","sha512":"d92c1d3c3e88355ad5fe51d365b3b69e874a86b9c37492bdfe48365c3d6bf6e1aa3e8d5c51bba373e21876561d104ad636eebd81571881dc659959b34d69deb7","ssdeep":"1536:CWM1MvMaMfM0tAX0HEbpNG2eLZy6lkQ/erkh7:6tAXkEfGc6ZWrk9","tlshash":"e1730e12ad84019bb4568d7f3895bf34a6f2eb28aad14595e4344d807ef28fd314f732","first_seen":"2025-09-04T12:31:23.516729Z","last_seen":"2026-06-30T05:02:59.63528Z","times_seen":3010,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/75.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.621Z","timestamp":1782537499621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/75.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIXpFmAipx0nFxFzyduGe27UjT%2BpGbhSssB84SNWKh23Bp%2FBqBrma3OB9aHafToBS4LULD5%2FTO0z95y1n0UF2cXWQv48QOkm%2FQqjTGET6hsZsT1hLpTNGU8M%2BzKbmdG47t1bt2mPn1erX0Qkmbrn\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 13502\r\ncf-ray: a121fd8ca9c356c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13502,"size_decoded":14278,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"2c59b7c0c81a6c33598ca9574fe92c8c","sha1":"12262f0f730af892aca76e1e61343a21689f1e92","sha256":"d57de5ef07bf01fd1a0ceae790861ce5ecbf29bc076e03ef7e948e207b8b05db","sha512":"3e79ede6dc88160a95aeba45b21f0289489a40f2eed8ff379c4d0a7f4a6b4ad57b7c1aa2f7cf00c9705c3c9a23128a883678061b626704c9051ed4448c1aadb9","ssdeep":"384:YiDLmh/PA6vmD6FdDp5Pl4PsKHNHq3ps/Kk:5+h/PAcmWFdVosCNHq3ux","tlshash":"7c52ce25f46c77ccdb51e23a9188825142e60ffaa05c39bd538370b901af73ca84f96d","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-28T11:50:27.567628Z","times_seen":845,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/30.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.642Z","timestamp":1782537499642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/30.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKLmHke0VeCoxVboFdie%2FWCEPXgnRMRYn9NU48UDZlfQbBjTwWtLc3WUCtarSF5hvtc%2BqPD92WSd10IwHrLsQQSg5YsNOX%2Fiaz7U0qXdKC%2FvAQfTxKL5yqKFOltlJdvnO3aX%2FAQMuqaImB1A%2BPul\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 38803\r\ncf-ray: a121fd8cc9cc56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":38803,"size_decoded":39580,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"9a98bff95dffc41869b8e77912a6cc54","sha1":"fd38ac19ce62ac3f0c4943e480f21ffd6d9f1550","sha256":"145f56ee7d36113098716277b52264c2ee886c0f52e64f1e69586dbf488b1700","sha512":"422da2a0fc3c49aca29e08ef651685d1cf2ec7d95e55e74bebdb05d4c015283da8c1f513e0bb82aead7931280f358c55caf6ec8668dde463b81852799d40dd5e","ssdeep":"768:o35GYSr3zvzBeBiP/rSSRaJ3hjWOGDm2C/SbKSYko5a1:HZDvzBeB8/rvRENldHSYB81","tlshash":"3103f18b79f4ed719db1c8201d6aba54903f847eaa01b33ef9d049c7de46a74e325470","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.452243Z","times_seen":171,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dapp.defisaverprotocol.xyz/cropped-saverlogo-1-192x192.png","fqdn":"dapp.defisaverprotocol.xyz","domain":"defisaverprotocol.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:20.008Z","timestamp":1782537500008,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cropped-saverlogo-1-192x192.png HTTP/1.1\r\nHost: dapp.defisaverprotocol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T07:32:23.926072Z","times_seen":16850090,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/saverlogo-1.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:18.987Z","timestamp":1782537498987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /saverlogo-1.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPiac69nJ9ueNVxcezFYSfL%2BmUC9HhjY9iOZtr0ZXuT40OhqWiu5ILkRWYpUxq4dgZo%2BhsFqhN5khJ7f4ZGFgq4Oy9wyDI9ePEvAWES9alFSWkNGOm2NHK9K%2FT9jtYg1h83p3SHDR22OrCkl4RlQ\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:14 GMT\r\nlast-modified: Wed, 04 Mar 2026 23:50:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96543\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncontent-length: 48582\r\ncf-ray: a121fd88a94156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48582,"size_decoded":49353,"mime_type":"image/png","magic":"PNG image data, 673 x 240, 8-bit/color RGBA, non-interlaced","md5":"ab06e4249ba3707f0872fcbaa6d2db55","sha1":"4ecdf0004659baa4966364f9b42843ba8c29c3c4","sha256":"b0a507ce17fe5c91d8d347b56d6a397c96ca0eac3322ce9a9adc4d1c549bb3f5","sha512":"a962e996aaa0a130dce36a1434227aa1dc5ff6a3df2fce170c79021e94643c2f619f046d40ca4b0ad23f546f9bc322666d9bd3da64dca633c270027422ec4b68","ssdeep":"768:WfrKucBmKt3xZcPli9Jiq18oA1Q/ZNJqhIRwsbRBqD6Pmh11fNT+jIjH/+tQ0OpT:Wfuucr3jUliH/yQTJ2w/3qDaurfNTgA3","tlshash":"a023f1970318f31fa7a06164dc146607af0ee2deaafe7199ac98c4d9154f246c176f31","first_seen":"2025-07-01T02:38:32.968808Z","last_seen":"2026-06-27T05:19:56.356526Z","times_seen":12,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/ledger-logo-short.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.544Z","timestamp":1782537499544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/ledger-logo-short.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpEWkQda2Qh%2FbOPiwRJI9O4NerlX7Yhngm1PlPL6PSy55bft5SP2i%2BDihybMXtEEex1g%2FrX5DBFgmWRloCvTmdGNPG9Rc3TyXNoEpEhKqZAMdcPTJNEKaHUt26qoFZh%2BdPSziLBNjFfd%2FeZvKZET\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 11 Dec 2024 09:39:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1064\r\ncf-ray: a121fd8c299956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1064,"size_decoded":1840,"mime_type":"image/png","magic":"PNG image data, 148 x 128, 8-bit/color RGBA, non-interlaced","md5":"76996344605eb9b51a64f02d77ea126b","sha1":"50dc710a979e93ef5e1b511074307608a3369eb1","sha256":"912d6f0e7e8351160a7ba02aa55fc8aeb3bcaa75c656d9e6b90df0003a643477","sha512":"075beb59a76a6c3628283b40cd49f1ce90e58dcee2b561465f971ce48be3bf6cd05c16345ca6b0d75dde662cd0b2eec44056bf3e7627fa2b9e5f931126d85be5","ssdeep":"","tlshash":"e5110d4e46279238aacd399200e6cbf946196680e809de358fbf37196b0024554b26b1","first_seen":"2025-11-20T20:18:12.793112Z","last_seen":"2026-06-27T05:19:56.357151Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/42.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.607Z","timestamp":1782537499607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/42.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yR8GvdlSMHB%2BqUf1cB7GPAdbx3X9hC0lUFiftI0pRsCiWk%2FPlc3OMhMrmfwPBks3BiaLW%2FCRl8ANi2vg2iQePQ6swoFMqNBOAFCQMYi7zLC1N4vHG6TzVDO0iuGXDnH48kxvawdRsE99cq%2FE20r5\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 74376\r\ncf-ray: a121fd8c89b856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74376,"size_decoded":75149,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"0880d3095d06a8981464ee7ca82eebf9","sha1":"59f7569ef5d9921ac0f336ade16d5d789cb2ecf4","sha256":"f3ed774fafa8f216d058bdec9d5488ab5dc2109f33d02a0a6e8e0849b4c7916a","sha512":"73d622bdcdab89889096552d12ea1ac42d8b5bea309ea86980164bbc130e3b0752613b71f918b0de02f3577613a7d758e70a43915e23c64494567c608f07d1f0","ssdeep":"1536:X4YSBya4a7VgY13XgE/3WjykJzcDY7HDvlzpH0sIyJT:JSEnmDAE/mjbJGY7jNzd0srp","tlshash":"65738c2a451ac175e7d02bf8eb754b8d33e0d7e8d0d33b9bd32c94a5b97a175720a880","first_seen":"2023-05-02T15:15:30Z","last_seen":"2026-06-28T14:13:05.079803Z","times_seen":180,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/tokenPocket.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.616Z","timestamp":1782537499616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/tokenPocket.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7a5vrK2pbT%2BYBg08UCAgP66PjfrL%2BLMd5%2FCtvu4yZIhVUVWemOanVsjHmhcvUUchQUExhwq6jsAz6MkF5uXL8MSf95vgD2bViapIO86lbCYG6GZ2853yMvNATC1S0SiL5UcDisfs1RL1hhp2fDEq\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10219\r\ncf-ray: a121fd8c99bf56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10219,"size_decoded":10990,"mime_type":"image/png","magic":"PNG image data, 1025 x 1025, 8-bit/color RGBA, non-interlaced","md5":"57a4a886cc644e5237ac1558226154cb","sha1":"c9c93969eda8debda97e1bbff3f9aa9f0567c310","sha256":"87cc555d45d2cb4f2e693d1f4e0b368b04c22f8adc0956f8635906765a9f20ca","sha512":"467b9a49e28c2e23ea2efc287836a35bd07a953a4fadaabe91eb4698f8907defb75a112d1b29000030758e4a6308f7dde798a9dcb500e6fe7db28dfc664375c2","ssdeep":"192:jLAfiyL8ArHsnH3RSklIe3sYCI6RLTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTV:wqAoL/cYCPLTTTTTTTTTTTTTTTTTTTT1","tlshash":"b4229c65972c74fed18e0072071e70fd38b69f6adbe257a88039af9c1986447ad30f94","first_seen":"2023-06-09T13:01:04Z","last_seen":"2026-06-27T05:19:56.409329Z","times_seen":123,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dapp.defisaverprotocol.xyz/cropped-saverlogo-1-32x32.png","fqdn":"dapp.defisaverprotocol.xyz","domain":"defisaverprotocol.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:20.010Z","timestamp":1782537500010,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cropped-saverlogo-1-32x32.png HTTP/1.1\r\nHost: dapp.defisaverprotocol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T07:32:23.926072Z","times_seen":16850090,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T05:18:18.178Z","timestamp":1782537498178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:18 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 23 May 2026 08:20:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zxqWTNiPmDYKB6aGWn6IOWkRhOgkNJ6sQS3ruzK71i8rrXAvQrI3nQ69JBcs04IUWnUli5RCeNJtOhHxw%2BFzjRh939Ysis%2B%2BCin1MloFspBFvStKj2SnGk3RHfgk342q9a36J6Zm%2BjgAprCSEH3\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a121fd83e92256c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.20.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":156371,"size_decoded":21231,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (347), with CRLF line terminators","md5":"2e1152d6a046714720227d362df28442","sha1":"dabbc0778d1fd258075b825cc9bb6f4c6d0eaf51","sha256":"2900d5b08f7d8fefba14b352e82daa0da10afa5b45071dfb6663953736db57f9","sha512":"8a5c25ef7a8bc1e8f70b7f16e23a50b4b02b3f750e2943d5f7cd20d34102b9ccc6a654ae69836ec6f3a61a9426139a37efb93db2984b77f0bd110d0d1e28e092","ssdeep":"768:kqsEO9VzS5c5DfaLzW2bAeIwEiaYBmw9oHm8mMs7hah5x6ix/o:FsE2VzQRfApi3BmTm8mMs7e5xHx/o","tlshash":"06e32361764f502a325f028f4037b78cb4ddedf4ca6255e9f4f0a13246f5c683baa269","first_seen":"2026-06-27T05:19:02.507778Z","last_seen":"2026-06-27T05:19:02.507778Z","times_seen":1,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":21,"connect":18,"send":0,"wait":287,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/phantom%20wallet.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.379Z","timestamp":1782537499379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/phantom%20wallet.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dvooQN46CEixNrYitBlaLkcWzMgJS5LqNfxj7rFEMI3akAC1bfSq6t6Zl3KoZahy6AUIlV5hQ1Nb30WOw71K89%2BDecg7dOX3rkKc15Qebg91u9rAxSOjr5UmhNGUJCCt%2FBcKjec%2FzwCJXtJnFBrE\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 10 Dec 2024 16:55:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 2087\r\ncf-ray: a121fd8b295d56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2087,"size_decoded":2857,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"3bb2395733ee3f05c38a877cf6b0ab9f","sha1":"ad8485d29e1cec417841db118a5e8426c98260dc","sha256":"53289855f83dc9bf08b0166b6072a91075cef5a21639a4a936bf48fecc57a9b4","sha512":"a9fd038f70dc01ef4bdd35d2add2bca7063fe777599599d81c37778ceccdcd443ee1f68befc193c652dbd6010410af8c680c7a2e5e8cd5a473dc5e4195add277","ssdeep":"","tlshash":"5d411a6ea5dc7cac3ce65b9d76eb4371a31254054c50fc2780912106bd8e32caa3634a","first_seen":"2025-11-20T20:18:12.826214Z","last_seen":"2026-06-27T05:19:56.386543Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/fantom.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.505Z","timestamp":1782537499505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/fantom.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghB%2Fx5O%2B0s34m3fwfixCLbYe3k9nEyW%2FURtA5dYM0UC94R4a0lMMORUwj6CEXWWxfJ56iW%2Bpup4jS7dMEQQJBQ%2BjMUtQEDfmyVgJdHCWNrba7aVHwOBINqyykDyR2t3XOz2LAcvgjXaAKWiQ792J\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 25188\r\ncf-ray: a121fd8be98556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25188,"size_decoded":25963,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8a4756b8cbd8f968e082bdc2f8289f26","sha1":"06fdf5333997e0d07a8cff36684334e024748b6e","sha256":"cb6d2d7a0ef8c4982195f42c9e9c8f349e39f2580932b86a062f03ca1066ac50","sha512":"361669d6d3f52c2299e81a7f82b440d34f33e0cd02ea8ce714714b95204c25177c0def31ef8f04d1651b75c21fba86a19899500a180fcf5f05d5b3e4d782c3c7","ssdeep":"384:PwRureUaFUhHdqHQ3Lg45mZXkP2ZPLhpw1WKyXpKNLWdxhDWRUhoI6t91E:4RnUgUFkEg45ue2ZPLLw1WKBiG8fk91E","tlshash":"ceb2e0a752f4eccd3fa899937f09e02ff18915fa07ed4c059260b90fd088d3555a4d96","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-06-27T05:19:56.376932Z","times_seen":81,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/13.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.527Z","timestamp":1782537499527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/13.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y22FDkGQhCiuyyApwKD1Fz0lxHg4sjS%2BboNjda2t1S8A3N70AGcNBfchgBUIheeMan%2ByVB%2FJrbRncZpm1th5pcg6cez5oUMqr5AvjGaEz2ozMYDstJqvlJQ2DznDR%2BHLXqzH1UIUpheGJbKYiFD1\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 15799\r\ncf-ray: a121fd8c099056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15799,"size_decoded":16572,"mime_type":"image/png","magic":"PNG image data, 227 x 228, 8-bit/color RGBA, non-interlaced","md5":"68da061495160c96f4bcb5e70e612fdd","sha1":"0a565c0e6b936dad697c1aa308718bfc7f91784f","sha256":"7b8d04a7e23327592989481272f6f6ef91039a90a2327a7d4630e4c896880333","sha512":"89a662b9a6775622b17a559faeea1ba32cb0189386494d4ee39f2146d9f67adf9a35459307ffb64f1aa46057554bce5f803df09614d861d85f6e52ba5ef1f549","ssdeep":"384:wnggX9P4O6SnebQItZu8zXjp8IjsyzpqZc8+N7PN:wnpB66gQI/uEzOIdzfbNx","tlshash":"4b62d0c2ba76b6d799c74a706001e959e86383a3bd90d784f60c58c72f8cfc8919578d","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.449527Z","times_seen":111,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/64.jpeg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.546Z","timestamp":1782537499546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/64.jpeg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGUlmKMtcE00qM5nW6XYvNCtFIiRwiup4OPUAfNY4%2BZ7hLDHpWS3xyXI43eZB%2FzJanu%2FM9TRSJii07UcLdHaD0jZZgoeuPnLLVicUmSXbM6JSVeabYdnYmsJtaAxgvSUcnaSmjYnk7wgNsU6qhhY\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 01:59:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5055\r\ncf-ray: a121fd8c299a56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5055,"size_decoded":5826,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"10d36d6ea6b8da1c14b23974fcb7caf2","sha1":"903334e19c1391a14d49e098d3c54ec2df713fd5","sha256":"89fc9fdb67448bccf582f6ef8c8ab2fc2d31f40e32e82ad541412d2f1dcd0b07","sha512":"7d4093b655f933351aaa35e0461b5f096e89eeb281300571a278b9396503aada8adbf036851b59baf327ec6dc1a9631f0f62baded9604afa7b370f325c725bf8","ssdeep":"96:I9Oqd34OwP0CUpANfVJKZmuIb5Gus9F81FPdGtcc53vA9aYGA:I9OZOwzU2EkuIdGuPoGiIxGA","tlshash":"19a17d0eb1232964dc23e0b5d492a7e3bbe44430d549e43d016a48d34649bf2df827be","first_seen":"2023-06-08T01:39:25Z","last_seen":"2026-06-27T05:19:56.450403Z","times_seen":88,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/nova.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.571Z","timestamp":1782537499571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/nova.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2Fjm6HXThEKCZUBThS9tX0hykGnramkXjjlAhqIENPTNwtIAeb8Sr8jgMZVg%2FaCb7NSFzeOhfndmI50H24LE9iIME%2F1Qwvg85QmhKaz46%2B3W3J8VKRL3dtzI0Ri%2FVQIyjFxruG6hGDYcZ%2FbtejMu\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Thu, 12 Dec 2024 01:01:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 31416\r\ncf-ray: a121fd8c59a656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":31416,"size_decoded":32193,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"776813cf6ef7dd88300e293a436fd46b","sha1":"ab07e78ae2f3bd3656c32603a2dc0db0abb527d2","sha256":"a57a6a6269d20abc2b996d3c31cc487b8503133460fe0cc1d8fa1af1878bf46e","sha512":"ee83e2acfe782b73a07461989b2c24cbf9564ba741b694fbdf4749c594f625e3ec76726d838324b7cb14c67b1ab30d315d30a8450e9fe5cd860e1c7fbd99cf2b","ssdeep":"768:URzEUV2b6Pfn/3dv7vAaH9NmzIswejaM9Y:Kp5zN7OIswLUY","tlshash":"77e2f235005bb3f5b371acc6860b0946cefd6858615022deb9bc6d8d07e52d6f8f5225","first_seen":"2025-11-20T20:18:12.764189Z","last_seen":"2026-06-27T05:19:56.418561Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/solflare.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.608Z","timestamp":1782537499608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/solflare.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1%2BnQavR0Qd3kjxjxmY21htCimUbuwLYdbBY%2BD8oQ6lbfjLTJptm49Jc%2FzRPj3DvbjeW0my5A%2FRqu0GBQ3pIhHPQFlNI1mScK39vmBEfcConn69TXizid62ZGXtiHZEaY1JvzkqNJOF289zlcA3K\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:37:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 40589\r\ncf-ray: a121fd8c99b956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40589,"size_decoded":41362,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"4ce1a6523f80bae26f0f6881a27e8dbd","sha1":"8c89ae00db33cab0cea4ae2fae73b63a6d8ac609","sha256":"c6f1ef257fa7799a2d946b55b35212dda3b635838fabb3a1dddcd99a5fed7e5b","sha512":"2886025cfe1b4e105b5a173c48e5ec9386c947e6a6cd6c4e7f7592800fedda1d1d9bbd9d6e409e0c7effe4b9c7a00f0445bc4d9cd598d971c3f1dc6cb07c86d5","ssdeep":"768:M4E2l7g1DoBc0GXWVR+3V/D/3oYk90jFr6/2lPvunnY4l4L:MPU7gj1X8+bvoEPvunn2L","tlshash":"3303f24287ce81e681c59a6d6c5d570a0a3c2c775fb923848a71cf07f37af0ea1c9412","first_seen":"2025-11-20T20:18:12.887085Z","last_seen":"2026-06-27T05:19:56.358989Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/34.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.410Z","timestamp":1782537499410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/34.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpUNFqIag7eQTXozHRB26kv7uKfwpCuhDTzDtExlEg%2BAN4j97Fcd6n1mcmyXDN741reP2a4CK%2FaZYvt%2BwSyjVL8wmlJvSKzNtVuITkqn1QvKV7MuTqSKYl9noT2i7cNtYa%2FCpZT1GvNsMVDwQOLR\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 04 Jul 2026 05:18:19 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 45036\r\ncf-ray: a121fd8b596556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45036,"size_decoded":45798,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2611d814a50a964b89d5f8bc1e5cb3a0","sha1":"116dec98eaf51538582d7d74442771652a3b5246","sha256":"d7a578c82c353b7b25507d43bad063e849164ea5020fd9929698e1330b163097","sha512":"7bdb943846ff4f2b708e5d6779858a963a7c63bab1617fdba487461b63be1bb3f01ec5c247967de8655ea1e7d6334a215dbe8d2222a5f6eb197defc6a112ae5c","ssdeep":"768:ewaL/LHDFDW8fOd9Cna0OnTVNccAe1oxrttQ565U76wZ8XhyTuAjiAhvH+k1Sdti:ewaLzHDb2OJOnTXSUEttQw54DyyuA2wl","tlshash":"ae1302efea8194bcf26160d2b7b1572b6001dac649dd7c962c9f5f40bb3c424b18c398","first_seen":"2023-05-04T02:59:55Z","last_seen":"2026-06-27T05:19:56.430684Z","times_seen":201,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/blocto.webp","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.460Z","timestamp":1782537499460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/blocto.webp HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FvTiEwNRZxlkZ5a%2Fz3iGWYhYepJzBbtWnWVPoxRNUPFhbr2T1vVlfdKYxJGQj13Eqfq0Ee6rnd%2FcVgNg%2FByWRzVwea2DEBL5d8Y1KGNFQ4gSHWzAn00%2B4zK%2FC3%2B5zOJs9GIvT%2FeC0tOLj13cuHp\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Wed, 19 Nov 2025 12:06:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3520\r\ncf-ray: a121fd8ba97156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3520,"size_decoded":4301,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b94cc16908f320cbe242dcaace572750","sha1":"4805a655d295d279a4c0a5c12fb413cfbe464090","sha256":"0b9f682cada2e29ab939e6f53cd1f9d3287e098583380faedbe4182d7bee45c2","sha512":"b64d4bb1e00ec99b502a76a23d862614e8f3c0f179ec43f5c63d5660ac2f2a9c86e1e48d507c2f6d5138898ffed7c6afc1f9d859049b894285b3033378d22063","ssdeep":"","tlshash":"89717e6aa350d033892dd2cd51a3f6cf2995227bb50d2f4ac8b64f0b44336f6645fb98","first_seen":"2024-01-08T00:36:03Z","last_seen":"2026-06-27T05:19:56.397139Z","times_seen":33,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/wallet-c.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.024Z","timestamp":1782537499024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/wallet-c.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZsdodhnStZhyTXR%2FwtxUMQk713T8mlyzHnYte0Y%2Bjb2NqjIlBmrXFYknnhaRxkAQP3jxR0sXFsBZsk9QqnZcTukE90SIqas0tqqFN5imbzfMc%2B5aVgJQ0U%2B70W4F5tVsB7EodPiDbrDh80DHm00\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:16 GMT\r\nlast-modified: Fri, 15 Nov 2024 12:37:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96541\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 6892\r\ncf-ray: a121fd88e94556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6892,"size_decoded":7666,"mime_type":"image/png","magic":"PNG image data, 115 x 104, 8-bit/color RGBA, non-interlaced","md5":"838262a88cdd8d320e0f0c441a1add40","sha1":"eeddf70b1101372584fe9301eeffd620e44e5ce9","sha256":"edfdb0fefdd812e74fa1d6c8a798d80d73a638c97dbb0b47420d0b67242c68d7","sha512":"bef49cd24ec6d10210083c813fbbe95e0ac51095562000e2bd853171d58858d78e6075e62272620f328d607b3c1bd749adfbdc371bb00b3aa79c130e98d6b321","ssdeep":"192:Ufw6hxMLS1yneqKHmM9k61fexTFP7OdRuNIGcKoyPwDd5:D6PwxeNRqTFPKdRuTho5v","tlshash":"7ce1aed5d548acef5e1d7911426d54a8fc1828f7ddbdd322ce21ea3630a4ba8820c263","first_seen":"2026-06-27T05:19:02.517252Z","last_seen":"2026-06-27T05:19:56.395623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/rabby.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.384Z","timestamp":1782537499384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/rabby.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPGiB%2BnI1Dn0tZ9H79CwxdGk50X6v0vcB35PHzjDCrBDPBuE28lqEKgl6yYhx7LosuRSdBiSxWWIeGORbR7o2QbpRXkWhxsu5fLUq6XrmXzkVtMBuoxYsOpUNFPKt0IZvJdai0n7OSxegpmGnkvF\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 10 Dec 2024 17:04:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 27672\r\ncf-ray: a121fd8b296056c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27672,"size_decoded":28439,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"0947d9d70bd0297c44d46dd7977031dd","sha1":"b79382a6e73ebed0f8fcbc433496a6511757fe6c","sha256":"b03e5065fe18e977e05f324e0d08004149b30095b49f8479a9a2629644bc65c7","sha512":"60fa37afb0e7ebf24e7d46491ce163e95bedb89d8559fdcc017a4c762a53680c3e8d7b81780a914c3e6f57eedd36f483aba48410b5195b873ac1d92f84910e8a","ssdeep":"768:qbzkHDAK33plDC9Sosl2+l3q3IMpZowQ2Wzh:qfgDDDC9SoqnliIMWt","tlshash":"29c2f2e5e75ec1b6f905628cbce41e3838acfd7bee18257950c0e4b0e1729127a5a742","first_seen":"2025-11-20T20:18:12.745453Z","last_seen":"2026-06-27T05:19:56.430018Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/32.jpg","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.556Z","timestamp":1782537499556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/32.jpg HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FFecJvPr7bbtBTSKD8%2FRSsTRbJ2C1Ja0e7ks9wUz%2BN0jkzXtKNMlTLuC9HM7t%2F%2FHl3%2Fmv3LEZP2eJVJwF59QWMa8g%2FDJUJ6ZT%2FoSIe1cKlIqBG81tANURASjWpbDSNkqrzMTIWWhjgbc3KD2GqN\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 22100\r\ncf-ray: a121fd8c399f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22100,"size_decoded":22882,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"01093db7d99e3e6cf5cca68b616f8255","sha1":"4ee6ef9a4a4d10ebdee3257382e696fc6f152c48","sha256":"141ce6ed4e42543ae843b0559095b24896ea4fe9ef3e22b8b90233d26377731c","sha512":"a2cb8086881562ce1e279925d513da39974f00823c1d75c0fe6c59ec45e65d3e15c16ed39da8dbd47b903263bf958ece2055c3aeb966dc7f900e4706a75e234a","ssdeep":"384:sxlZ5D+fLqZHrv+GXj9Lf9raeytaAwuNBo91K8LcpeGALqqj0UunTU:UZ5Eedv+GXJf9rzLAwau91KX6LUTU","tlshash":"5ea2d1ecb3702b82f57dd57e0d5ca440036c6625aa9583a7f071433b838ea65e6991ce","first_seen":"2023-05-01T21:31:16Z","last_seen":"2026-06-27T05:19:56.398393Z","times_seen":234,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"allresolved.defisolution.net/assets/wallets/img/27.png","fqdn":"allresolved.defisolution.net","domain":"defisolution.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allresolved.defisolution.net/","date":"2026-06-27T05:18:19.635Z","timestamp":1782537499635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defisolution.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 02:00:22 GMT","end":"Fri, 21 Aug 2026 02:00:21 GMT"},"fingerprint":{"sha1":"51:C6:65:DE:93:78:A3:8E:A6:50:E8:5C:81:A3:F5:63:47:55:FE:19","sha256":"14:DE:30:E4:E5:94:DA:F3:4F:E9:50:DA:88:72:D2:7A:3E:20:5F:4F:89:B5:66:EA:4A:37:5F:48:F5:F8:13:A3"}}},"request":{"raw":"GET /assets/wallets/img/27.png HTTP/1.1\r\nHost: allresolved.defisolution.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allresolved.defisolution.net/\r\nCookie: cf_clearance=HXE1L.wi7bXM3shbZYxydk17oaG7Dpm_EtghS20Vlwg-1782537499-1.2.1.1-b.7_qgwU87QKeRkI6V08cbg0nfX3atwxdFKdZdGee.tGzjeLmE8ita6bIeBhC9HtlUyb_jFR56qj.oalgLmJ2QpTPDo.LkW9xVzM.8MIKaafnBSNcVRZbP2O6zvq9bn6_EcKGz.3mWxL27qlkOrxKDzQAyJc.IhQZc7uj63iexWsDXSeKe11Zo8ff1xmOo5YvByH5.dAW6v8_h.emZhJGRUQz7nVxBJZl68HbOthQB.wbmlMn8aY9deN7L6lBvn0bKCUG4f11pR.XIFnibUpyK5c7AsDZnSQfOroOxq_1QFWprnpKcjHC0AzxSA5DHgcJpSDYRjb0XH5r89l8m9r.w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 27 Jun 2026 05:18:19 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHEEUqcdrqzzQzQGJou%2B3h8EMZsBRroJM%2B70LNMolMv%2Fji4fn80XFyl81R0tP4L2PW%2Fwv8O%2BtTG%2F54lM0XbnWubYKLIYUaOYe3%2FCg97SbPqPx8xluY%2F1lcMKGNsVmQ3tkhBf2o%2FgB8D0OnZqwVK8\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Jul 2026 02:29:17 GMT\r\nlast-modified: Tue, 19 Mar 2024 02:00:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96540\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 237616\r\ncf-ray: a121fd8cb9c956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237616,"size_decoded":238400,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"928292fe642172a18e62feb5eaa2d639","sha1":"3726876b4d2c6dedd3dfb896fda587cfbd9f1dc3","sha256":"17c2b41b3753140c6f962ad3b04d1f94edaa2a045649ed9578176d111313e07f","sha512":"a2365b1b15f007dfc105e4b26ebf472bd3a06be31d8cd18f12a8a250aabb67e551c103277317e03f1f9d6d0d206a7b186214472fb794a93dd66dc8683b258774","ssdeep":"6144:6jBXY/o62rnPlVbCRQ+zFGQDhfP9g+Rrc+qFY0dk:6ZSo6EnPlVGRZYKhfaiwXFY0dk","tlshash":"fa341203b3f53bded2d14634254b6b1606b59337c2e3c09aa6ae00f96f67756ca28dc4","first_seen":"2023-06-09T13:01:05Z","last_seen":"2026-06-27T05:19:56.379135Z","times_seen":86,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"allresolved.defisolution.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}}]}