{"report_id":"94f386d2-1132-4c89-9416-3044e9d50a22","version":0,"status":"done","tags":[],"date":"2026-06-25T00:50:50Z","url":{"schema":"http","addr":"nkfwallet.com","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"nkfwallet.com/","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"title":"NKF Wallet","dom":{"size":17756,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17329)","md5":"0b49ec02d39a1c711ba4d7d8553b0a85","sha1":"ce310cba849f4641332bdaf8ed6ba97928297947","sha256":"be323761f1213697622d6262c93769cd103f8893873f740130cd170a2781cfd0","sha512":"aaf79a413d76c4c63bac96ecace2ae0e448f4e9d59144d1a0755e2f78db42f1002cb4ba9f1567a63220274f622e48e381f441c222a85539faa9aafb68c891c8d","ssdeep":"384:GCx5IAM+BrEz4/O5+5ru5z/sJxujnIxINJgI7B:Gc5IAM+BrEz4/O5+5ru5z/sJxujnIxI1","tlshash":"0082843133512d3f768702e8f2e4b776b1aba318d517d91862fd40b227d2cc8ea27a50","dom_hash":"domhash00763b25f84fb904e638dfcd16d72604","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nkfwallet.com","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T00:50:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"nkfwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nkfwallet.com","ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2026-04-06","domain_rank":0,"first_seen":"2026-06-25T00:47:11.276771Z","last_seen":"2026-06-25T00:47:11.276771Z","alert_count":6,"request_count":6,"received_data":863461,"sent_data":2921,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nkfwallet.com/assets/index-BrECjTxh.js","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e593f4ddcbc0326d9daf492cb2e0562","sha1":"2ed63ebe268fe42db1d26935527fed711f70062e","sha256":"8500413a4f6a66e6477ed6baa91450a05a336a19ed77b3972e8dc63b5b76563e","sha512":"32aa005c57adb0a5ef2b6f8cd7ef386e5137f83000bec7c9701216b189f448f080ef3a8259419cf04febb54f9bf2325312c4bda1a921324be0ccbe4b6cfbbbdf","ssdeep":"6144:bYz4Vj4sFMMJLYO2YXoGT/h6Y45nIn9ZjNHpB90IB9EEUBfalgNR36aoWRb04M02:U2J4CZjNH9Q8lgTx0WGXsfK","tlshash":"da054be67280b676a7976164406f010eb33e8855dc0e442cb5b4f8ef2db184476bbfb9","size":810994,"data":"","first_seen":"2026-06-25T00:47:18.365236Z","last_seen":"2026-06-25T00:50:52.336399Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nkfwallet.com/assets/index-BrECjTxh.js","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nkfwallet.com/","date":"2026-06-25T00:50:27.602Z","timestamp":1782348627602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nkfwallet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 14:26:59 GMT","end":"Wed, 12 Aug 2026 14:26:58 GMT"},"fingerprint":{"sha1":"A8:97:A1:AD:84:1B:D6:F3:80:9E:AA:1B:E2:CD:87:90:2C:2C:1C:56","sha256":"8F:0C:20:81:D1:95:58:0A:88:E9:85:50:67:81:47:04:DB:85:D2:A5:17:5E:86:5B:F9:3B:AC:E3:DB:89:43:36"}}},"request":{"raw":"GET /assets/index-BrECjTxh.js HTTP/1.1\r\nHost: nkfwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nkfwallet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Thu, 25 Jun 2026 00:50:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 810994\r\nlast-modified: Wed, 24 Jun 2026 22:24:36 GMT\r\netag: \"6a3c5924-c5ff2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":810994,"size_decoded":811242,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43147)","md5":"2e593f4ddcbc0326d9daf492cb2e0562","sha1":"2ed63ebe268fe42db1d26935527fed711f70062e","sha256":"8500413a4f6a66e6477ed6baa91450a05a336a19ed77b3972e8dc63b5b76563e","sha512":"32aa005c57adb0a5ef2b6f8cd7ef386e5137f83000bec7c9701216b189f448f080ef3a8259419cf04febb54f9bf2325312c4bda1a921324be0ccbe4b6cfbbbdf","ssdeep":"6144:bYz4Vj4sFMMJLYO2YXoGT/h6Y45nIn9ZjNHpB90IB9EEUBfalgNR36aoWRb04M02:U2J4CZjNH9Q8lgTx0WGXsfK","tlshash":"da054be67280b676a7976164406f010eb33e8855dc0e442cb5b4f8ef2db184476bbfb9","first_seen":"2026-06-25T00:47:18.365236Z","last_seen":"2026-06-25T00:50:52.336399Z","times_seen":2,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"nkfwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nkfwallet.com/assets/index-7q6MkfYE.css","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nkfwallet.com/","date":"2026-06-25T00:50:27.607Z","timestamp":1782348627607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nkfwallet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 14:26:59 GMT","end":"Wed, 12 Aug 2026 14:26:58 GMT"},"fingerprint":{"sha1":"A8:97:A1:AD:84:1B:D6:F3:80:9E:AA:1B:E2:CD:87:90:2C:2C:1C:56","sha256":"8F:0C:20:81:D1:95:58:0A:88:E9:85:50:67:81:47:04:DB:85:D2:A5:17:5E:86:5B:F9:3B:AC:E3:DB:89:43:36"}}},"request":{"raw":"GET /assets/index-7q6MkfYE.css HTTP/1.1\r\nHost: nkfwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nkfwallet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Thu, 25 Jun 2026 00:50:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 49995\r\nlast-modified: Wed, 24 Jun 2026 22:24:36 GMT\r\netag: \"6a3c5924-c34b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49995,"size_decoded":50227,"mime_type":"text/css","magic":"ASCII text, with very long lines (49928)","md5":"42a29c655ebf7bf0e2fd81d36d4fe683","sha1":"3b0fc9aed5bad7d6c8165e894f4adf340743dec8","sha256":"edee651ef4ef38c7dd13daa04c164dc675d379aa1a7994a532bd74fc13bd0ed9","sha512":"01e2d701a70ece925a0ea922d1f5a832d6316d7d95d3e2660e313cce858edd8b565544e48b276bcdab5e571ef0b1910f1d5df10d810a3feb6a9f3fe742e2f2db","ssdeep":"768:1G8toiKZNwylgoZ2yM1d4t1lQlSWdNOnToeC7Jp7Ac+Wy0sjMzlj0rp/S:ToiKZNwloMey9Jp7AhW5zlj0rc","tlshash":"a4237650f229d97fac3364f9d79cb48cb60ab196cd216be8fa02321217c77f58c46624","first_seen":"2026-06-25T00:47:18.36627Z","last_seen":"2026-06-25T00:50:52.338417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"nkfwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nkfwallet.com/favicon.svg","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nkfwallet.com/","date":"2026-06-25T00:50:27.991Z","timestamp":1782348627991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nkfwallet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 14:26:59 GMT","end":"Wed, 12 Aug 2026 14:26:58 GMT"},"fingerprint":{"sha1":"A8:97:A1:AD:84:1B:D6:F3:80:9E:AA:1B:E2:CD:87:90:2C:2C:1C:56","sha256":"8F:0C:20:81:D1:95:58:0A:88:E9:85:50:67:81:47:04:DB:85:D2:A5:17:5E:86:5B:F9:3B:AC:E3:DB:89:43:36"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: nkfwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nkfwallet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Thu, 25 Jun 2026 00:50:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 311\r\nlast-modified: Wed, 24 Jun 2026 22:24:36 GMT\r\netag: \"6a3c5924-137\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311,"size_decoded":545,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa21537181b0d6269d0352a95870a7e2","sha1":"ae473ccb2c00ac0975069208d094cad2d31bf6f8","sha256":"a5f64a9dd462fcaf41f4bfad44fd46b7392125cda6a91e6e371367271b57b627","sha512":"048f577313409c91fb184979155b2804ad48dc5b6b5e70fec981431aff0b7a114ff4237d04a70ce4b506c7b0f7f6ec2a19a4dc49cd5559047ccde8b417137bde","ssdeep":"","tlshash":"85e07d32c588da09d21c0d06661fb4d9a48ab1ca9e868814fb401637d4cb8d319d538c","first_seen":"2026-06-25T00:47:18.363255Z","last_seen":"2026-06-25T00:50:52.34097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"nkfwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nkfwallet.com/auth/session/check","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nkfwallet.com/","date":"2026-06-25T00:50:28.048Z","timestamp":1782348628048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nkfwallet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 14:26:59 GMT","end":"Wed, 12 Aug 2026 14:26:58 GMT"},"fingerprint":{"sha1":"A8:97:A1:AD:84:1B:D6:F3:80:9E:AA:1B:E2:CD:87:90:2C:2C:1C:56","sha256":"8F:0C:20:81:D1:95:58:0A:88:E9:85:50:67:81:47:04:DB:85:D2:A5:17:5E:86:5B:F9:3B:AC:E3:DB:89:43:36"}}},"request":{"raw":"POST /auth/session/check HTTP/1.1\r\nHost: nkfwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://nkfwallet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nkfwallet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 \r\nserver: nginx/1.28.2\r\ndate: Thu, 25 Jun 2026 00:50:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 66\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":212,"mime_type":"application/json","magic":"JSON text data","md5":"55c5c01a8886aa189c581307c9edcdd8","sha1":"569503e51ba3e63785f05b406ffc488c06eb4bc5","sha256":"eabcda4a4f2ecceb6d5f4c401ed2b4d6bd101b355926233f2ce8b68d67f2066e","sha512":"52a9c6ccc8371a84a0033154fa7045fdcc95f195e514f52a6aef28ab30429bf484b39391c8c3bb3e988219089bf2fc279e879a74f0e139033a846bc32335ce77","ssdeep":"","tlshash":"1ba002156656ac765f56c29f36bd508352f44452a18023055c28012e1bdddb55612520","first_seen":"2026-06-25T00:47:18.362193Z","last_seen":"2026-06-25T00:50:52.342708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"nkfwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nkfwallet.com/favicon.svg","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nkfwallet.com/","date":"2026-06-25T00:50:28.111Z","timestamp":1782348628111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nkfwallet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 14:26:59 GMT","end":"Wed, 12 Aug 2026 14:26:58 GMT"},"fingerprint":{"sha1":"A8:97:A1:AD:84:1B:D6:F3:80:9E:AA:1B:E2:CD:87:90:2C:2C:1C:56","sha256":"8F:0C:20:81:D1:95:58:0A:88:E9:85:50:67:81:47:04:DB:85:D2:A5:17:5E:86:5B:F9:3B:AC:E3:DB:89:43:36"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: nkfwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nkfwallet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Thu, 25 Jun 2026 00:50:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 311\r\nlast-modified: Wed, 24 Jun 2026 22:24:36 GMT\r\netag: \"6a3c5924-137\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311,"size_decoded":545,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa21537181b0d6269d0352a95870a7e2","sha1":"ae473ccb2c00ac0975069208d094cad2d31bf6f8","sha256":"a5f64a9dd462fcaf41f4bfad44fd46b7392125cda6a91e6e371367271b57b627","sha512":"048f577313409c91fb184979155b2804ad48dc5b6b5e70fec981431aff0b7a114ff4237d04a70ce4b506c7b0f7f6ec2a19a4dc49cd5559047ccde8b417137bde","ssdeep":"","tlshash":"85e07d32c588da09d21c0d06661fb4d9a48ab1ca9e868814fb401637d4cb8d319d538c","first_seen":"2026-06-25T00:47:18.363255Z","last_seen":"2026-06-25T00:50:52.34097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"nkfwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nkfwallet.com/","fqdn":"nkfwallet.com","domain":"nkfwallet.com","tld":"com"},"ip":{"addr":"3.255.20.51","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T00:50:27.229Z","timestamp":1782348627229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nkfwallet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 14:26:59 GMT","end":"Wed, 12 Aug 2026 14:26:58 GMT"},"fingerprint":{"sha1":"A8:97:A1:AD:84:1B:D6:F3:80:9E:AA:1B:E2:CD:87:90:2C:2C:1C:56","sha256":"8F:0C:20:81:D1:95:58:0A:88:E9:85:50:67:81:47:04:DB:85:D2:A5:17:5E:86:5B:F9:3B:AC:E3:DB:89:43:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nkfwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Thu, 25 Jun 2026 00:50:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 460\r\nlast-modified: Wed, 24 Jun 2026 22:24:36 GMT\r\netag: \"6a3c5924-1cc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":460,"size_decoded":690,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"98bab895420de6091b26ce6df906188f","sha1":"09cd6782da59ff776b2bcb1be19befd25b4eaa6c","sha256":"6e4b9b4bd7261e46f7952c0c8ad8e7fe74488f49b2c0d90a9d1dc724cfff5db3","sha512":"3112860d2433ec2afa60a9a91f37a469236aa906a0ad3eee51ea77b45aa9f3aa114980359d2300be9556c8011a8e20f3ca12341f7d97b26ed4752a9c05832f01","ssdeep":"","tlshash":"f0f05c42d4e0ce05533047646ec1f5189d96e7874749ae4472eb607d1f84b82cfdf5b8","first_seen":"2026-06-25T00:47:18.364277Z","last_seen":"2026-06-25T00:50:52.345822Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":5,"connect":32,"send":0,"wait":32,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"nkfwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}