{"report_id":"81f71a1b-ff06-409b-8666-944943bef21a","version":6,"status":"done","tags":[],"date":"2026-06-05T08:54:31Z","url":{"schema":"http","addr":"wallet-tool.com/","fqdn":"wallet-tool.com","domain":"wallet-tool.com","tld":"com"},"ip":{"addr":"195.110.124.133","port":0,"asn":39729,"as":"Register S.p.A.","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"http","addr":"wallet-tool.com/","fqdn":"wallet-tool.com","domain":"wallet-tool.com","tld":"com"},"title":"wallet-tool.com/","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-02T10:42:18.188404Z","times_seen":1034623,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wallet-tool.com/","fqdn":"wallet-tool.com","domain":"wallet-tool.com","tld":"com"},"ip":{"addr":"195.110.124.133","port":0,"asn":39729,"as":"Register S.p.A.","country":"Italy","country_code":"IT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-10T08:54:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"courtesy.register.it","ip":{"addr":"195.110.124.148","port":80,"asn":39729,"as":"Register S.p.A.","country":"Italy","country_code":"IT"},"domain_registered":"2000-02-08","domain_rank":0,"first_seen":"2017-02-01T10:50:45Z","last_seen":"2026-05-31T14:04:17.661888Z","alert_count":0,"request_count":1,"received_data":287,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"wallet-tool.com","ip":{"addr":"195.110.124.133","port":80,"asn":39729,"as":"Register S.p.A.","country":"Italy","country_code":"IT"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-08T13:00:38.051166Z","last_seen":"2026-03-08T13:00:38.051166Z","alert_count":6,"request_count":3,"received_data":1405,"sent_data":1239,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"wallet-tool.com/favicon.ico","fqdn":"wallet-tool.com","domain":"wallet-tool.com","tld":"com"},"ip":{"addr":"195.110.124.133","port":80,"asn":39729,"as":"Register S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wallet-tool.com/","date":"2026-06-05T08:54:08.995Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wallet-tool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wallet-tool.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 05 Jun 2026 08:54:09 GMT\r\nServer: Apache\r\nContent-Length: 209\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":209,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"18ffb59b61525f781cf9251045be575d","sha1":"bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d","sha256":"b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642","sha512":"a032f853abd9492232e1183d1cb1d14110b623f2e9dec56b7b64dd576a0317dda8d51125763e11d6642433c5364b2bd10a994ee4f1514629a4950bbab3aba499","ssdeep":"","tlshash":"ebd0229ea083228f452321903ac211d2a54d23a6bc7a42e83c83a88a921893dc4ca29d","first_seen":"2023-04-05T03:16:16Z","last_seen":"2026-08-02T10:34:17.275413Z","times_seen":37886,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":1,"connect":29,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-tool.com/","fqdn":"wallet-tool.com","domain":"wallet-tool.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-05T08:54:08.715Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: wallet-tool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T10:58:21.475818Z","times_seen":17671559,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":53,"connect":29,"send":0,"wait":0,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wallet-tool.com/","fqdn":"wallet-tool.com","domain":"wallet-tool.com","tld":"com"},"ip":{"addr":"195.110.124.133","port":80,"asn":39729,"as":"Register S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-05T08:54:08.842Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: wallet-tool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 05 Jun 2026 08:54:08 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 06 Mar 2026 23:15:05 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 805\r\nConnection: close\r\nContent-Type: text/html\r\nContent-Language: it\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":805,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"39d65c3e7c81739cf3dfdf38cfe2fa53","sha1":"376226d0e6fa142bb7b06c0652e96e8edf8b9926","sha256":"934d281843c26f986b1fb5ad6059f14e6475925443961b0aa62d2764087ed305","sha512":"b2e54d33b77189de1eb278d17713eb663798c0105d001940e8831322ccc913a78d8cadbe721e7eecf750ae0c7fe86b8f0408f89f9a8b0560472c963eed984dfa","ssdeep":"","tlshash":"4d01637d918843134e5b25e1bdba66956a377d4134805edaf102744974c2150cba1bf9","first_seen":"2023-04-05T09:44:01Z","last_seen":"2026-07-25T14:58:40.798562Z","times_seen":241,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":30,"dns":1,"connect":29,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"wallet-tool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"courtesy.register.it/index.html","fqdn":"courtesy.register.it","domain":"register.it","tld":"it"},"ip":{"addr":"195.110.124.148","port":80,"asn":39729,"as":"Register S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://wallet-tool.com/","date":"2026-06-05T08:54:08.987Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: courtesy.register.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wallet-tool.com/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 500 Internal Server Error\r\nDate: Fri, 05 Jun 2026 08:54:09 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.2.7\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Sat, 26 Jul 1997 05:00:00 GMT\r\nContent-Length: 6\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"3d2a1d259f128201c1185efc7b92c7b3","sha1":"8f1f4b7f7a475081dbba2ddd91bb30c1f829066c","sha256":"eb5dc672f4c4d107a8d8362b551c4f3faf96e4da53d41940757d1812b59ca6d2","sha512":"7f8fb34bd4b587e409789a48d742fd282a336bf02cc4f6df07120ec7d7f5bbe039fb515a5ec480b0cc3ad983b2677d9d744a09525f47f01a2fb8ee9243a649ce","ssdeep":"","tlshash":"dd4000000000300000000000000000000000000000000000300c000003000000c00000","first_seen":"2023-04-05T09:44:01Z","last_seen":"2026-08-01T04:05:08.516032Z","times_seen":484,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":61,"dns":35,"connect":29,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}