{"report_id":"a04face7-8bb7-44b8-9507-3ffdfc55fb59","version":6,"status":"done","tags":[],"date":"2026-05-18T23:45:33Z","url":{"schema":"http","addr":"cardanowallet.pro/","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"cardanowallet.pro/","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"title":"Cardano Wallet - Secure ADA \u0026 Native Token Wallet for iOS","dom":{"size":27324,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14723)","md5":"a937f71b4df61bcac5e2164e260fa081","sha1":"bb12425ca479e95da2366222d457fe12c2c42a75","sha256":"f351ee97b4083fba7367034a4fb05a720f050e4a88cdc754bf3394ddbab15790","sha512":"59eb48048cfa1b22770ea3d18f500ff5b202ba6ee4d19504d2b36fbb676ecf028337c55e299a846aca108827f42adffae3ca0353a4ee780453b5eeda5acb6aa4","ssdeep":"768:JvMsnB7cxksc64Jysq7vGEOQbBysh5MwJs:JUXx/c64Jysq7vVB1hE","tlshash":"b6c2c610724c027c7a2b9b69fac4a33c9025f442eea34425f25d0456d6c3ff925fbb99","dom_hash":"domhash23d8d412e53cb3fd74cc01b2031d5e43","first_seen":"2026-05-18T23:45:39.168722Z","last_seen":"2026-05-18T23:45:39.168722Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cardanowallet.pro/","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T23:45:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"storage.googleapis.com","ip":{"addr":"142.250.178.91","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-05-18T05:48:35.746529Z","alert_count":0,"request_count":1,"received_data":231709,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cardanowallet.pro","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":45,"request_count":15,"received_data":1241220,"sent_data":10036,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cardanowallet.pro/~flock.js","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-13T20:09:32.149098Z","times_seen":15466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/index-CvhBZJI8.js","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"77f37c9ac607b6cf8e4b6a728b1ad135","sha1":"a25818f4c8e10dfb3859c4430da301469c13fca7","sha256":"90963fb1ad6c74f4b862c2192b0871426deeb660ebe274224d9691cf8a74bac8","sha512":"6840e95b525065bc254d11c5899fefccc05b629942be58b9d186a06f08f6cf8798e69c1d533e9ca551196e6f1971cbf5ca2abecc4bfd693aec2514b6563e1753","ssdeep":"6144:iYQezTPylOY1fnIzmrJ1kfxhSXeEfMqKFXsunFiWEOgGF9qBkP:iNOY6zmTkfxhSXezxsuFiWFG+","tlshash":"94748ed8305ab1796bb702b2507f410ab33d2912a80d8460f12ced6db7b5546a1bbffd","size":340028,"data":"","first_seen":"2026-05-18T23:45:39.174908Z","last_seen":"2026-05-18T23:45:39.174908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cardanowallet.pro/","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T23:45:06.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nset-cookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z; HttpOnly; SameSite=None; Secure; Path=/; Domain=cardanowallet.pro; Expires=Tue, 19 May 2026 00:15:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fdebbd0fdd0b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a2d46c5fcc6fb2e9ad11a65bc4d91562","sha1":"7b3a08465e511ca8df807d43ca7323e506014f32","sha256":"c8d24d39d7a99b7c64ef7cc48c590b580614e5b4a142cb636c5e61cc833d157f","sha512":"124f76ebf67a3a7f91d8314294ccc117497bf21aaa250f4074a39bf2fdb5ed7e110947033a724113eb8514773cf5ddba48bf1528ba52372359c2b224a7e7efc3","ssdeep":"","tlshash":"40414163cba4981993a2c3a4cee6f6d5c834d503c2459d5872dc92a90ec6fc1c4e77bb","first_seen":"2026-05-18T23:45:39.172019Z","last_seen":"2026-05-18T23:45:39.172019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":39,"dns":17,"connect":1,"send":0,"wait":258,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/index-CvhBZJI8.js","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/index-CvhBZJI8.js HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"77f37c9ac607b6cf8e4b6a728b1ad135\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fdebbd3ef6ab4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":340028,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"77f37c9ac607b6cf8e4b6a728b1ad135","sha1":"a25818f4c8e10dfb3859c4430da301469c13fca7","sha256":"90963fb1ad6c74f4b862c2192b0871426deeb660ebe274224d9691cf8a74bac8","sha512":"6840e95b525065bc254d11c5899fefccc05b629942be58b9d186a06f08f6cf8798e69c1d533e9ca551196e6f1971cbf5ca2abecc4bfd693aec2514b6563e1753","ssdeep":"6144:iYQezTPylOY1fnIzmrJ1kfxhSXeEfMqKFXsunFiWEOgGF9qBkP:iNOY6zmTkfxhSXezxsuFiWFG+","tlshash":"94748ed8305ab1796bb702b2507f410ab33d2912a80d8460f12ced6db7b5546a1bbffd","first_seen":"2026-05-18T23:45:39.174908Z","last_seen":"2026-05-18T23:45:39.174908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/app-icon-CCnIXkwR.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/app-icon-CCnIXkwR.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 230969\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"ea27f9dad37bd1f8d85d31a18910b2e3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fdebbd6d90db4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"ea27f9dad37bd1f8d85d31a18910b2e3","sha1":"3d2f334dc3f5e7e009c6cfe1d01297ecd35981e3","sha256":"36b67440cf4fca90ad57c1755aa56c13ea6d17443d3a7f4202156e8583d91471","sha512":"cd2e8f00d8f55b308d40d7f199580be1b4030f0c0e75c02fb8d42997c6433d4d909c532ed208613589d48cea02af3407cb5fe9da2090bf032f9d55cc2b7e8fb3","ssdeep":"6144:KPv6FFD0avadWvYOeiNhaOiLSPMFTEdNpmto:KaQ2xdeYNiLSqTENoto","tlshash":"ce3412c9047bc5e1c75a450b938919f9ab7d362829f8291c27b6e52a0e409fcebc3dc5","first_seen":"2026-05-18T23:45:39.177851Z","last_seen":"2026-05-18T23:45:39.177851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-portfolio-DRm7hJ22.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-portfolio-DRm7hJ22.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-wallets-DdhAXzjT.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-wallets-DdhAXzjT.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/index-C8ITLG4_.css","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/index-C8ITLG4_.css HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b1911f3cb3734b3600a006b74ca0e63c\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fdebbd3ff6bb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57989,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (57988)","md5":"b1911f3cb3734b3600a006b74ca0e63c","sha1":"ac05d0a77ea10d76ee4aca50db075bb774291296","sha256":"0358b6b6c9248ec04f7ca040745ed5be76ea9a4e1e41cb9e0ca57633cc645b3c","sha512":"39ac82b939317c3da17eedb29cf4970b92b64d005d07d10501a384312d7c2ea30cb860a1bdece5b85d5c4b32f6df5bcc60fcf95977fc348b4f9d5c85572037da","ssdeep":"768:NhTdZYSkcDUvZNYrehaG/VV1U378VQZkt5Fy/GTWE7sW:NhTPYSkOUzaG/V0378VQZkt5FyCWEz","tlshash":"d943951ab919613e3c2790e8c3ccb9ec611af0c0dd3b05b9be9a41216ad37f51dbb558","first_seen":"2026-05-18T23:45:39.182693Z","last_seen":"2026-05-18T23:45:39.182693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/apple-icon-DE469PD5.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/apple-icon-DE469PD5.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 32442\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"ff278ab33974432ddf240298db2ab03f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fdebbd6d910b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"ff278ab33974432ddf240298db2ab03f","sha1":"27400d3b7f631f36c50588ae7d014934f1f56cfa","sha256":"2cf7dbaf37349ee3ba4a7aa26c25ca811a7e02fac901a85a77d0193f9b4434a7","sha512":"7da02f55530de6326f811b8cd60441d2472bd46d5a5d188a7e21647849527c54c80dc27ba9158937bf58385ec1960675f45e9dc82f78519aeb376d123b65fd48","ssdeep":"768:IYu1CA8L8dR1Occml7rP1QhiyayfQFmcnDoMSfIgdRnL:IYu1CA8LvccmxP1giyZQFmcDoM38RL","tlshash":"35e2e145d7ebe6e628a3b42c38fe509123334db44c0dc46a4dd2ec5bad0a345867f283","first_seen":"2025-11-15T11:13:32.257266Z","last_seen":"2026-05-18T23:45:39.18543Z","times_seen":6,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-send-DzpaLzyg.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-send-DzpaLzyg.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-wallets-DdhAXzjT.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-wallets-DdhAXzjT.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 106424\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"9305d533ba9e0ccee5bc9ac1c0dbc2f1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fdebbd70948b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 883 x 1920, 8-bit/color RGB, non-interlaced","md5":"9305d533ba9e0ccee5bc9ac1c0dbc2f1","sha1":"984960022f7a46eac508e549cd52214b202b56c4","sha256":"fd9698fba1819e5ee66e2b30d2cc7e025fcd3108825ad3a973d42ba0871d2616","sha512":"c50ab81075f5acd3f0256f5ac2d2d0fa70c872b8bf5b99c9ea9711f6a34243a9d898bd5a69af0532e0cfda618a960067bd4d8aecc57175c86ec81ad4704d6097","ssdeep":"3072:QM1M7TLrv007M91ecgtXcMz51Z++eHWH9m:QMC7THvpvXNzDU+yKm","tlshash":"97a3e16f507fe4d1b8caf2e1106d3aadcc5192c450c176869eace6fcc1ca19f3a82795","first_seen":"2026-05-18T23:45:39.18817Z","last_seen":"2026-05-18T23:45:39.18817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/~api/analytics","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nContent-Type: application/json\r\nContent-Length: 338\r\nOrigin: https://cardanowallet.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z; session-id=3399864c-3a07-442a-ba4b-1c21b5e6dce1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":338,"data":"{\"timestamp\":\"2026-05-18T23:45:07.929Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"3399864c-3a07-442a-ba4b-1c21b5e6dce1\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://cardanowallet.pro/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:09 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fdebbd89a0db4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-08-13T03:36:38.061723Z","times_seen":12922,"resource_available":true,"data":null}},"time_used":1470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-trending-Dh_zArYQ.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-trending-Dh_zArYQ.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 190725\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"aa9d2978e8a960f4f7f9dff9a89700cd\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fdebbd70947b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 883 x 1920, 8-bit/color RGB, non-interlaced","md5":"aa9d2978e8a960f4f7f9dff9a89700cd","sha1":"f138c795f43afa5ef2218e9b3ed87aae55964b89","sha256":"d5c4c0f95a31a7ce5b803bbcd26f7ade86cacb78b5e2dce11ab5b6ad762a0fe2","sha512":"82a97f36797cf400b8251018e3c27502c869263bebbde5150a7b9370705649459f53ad52720841fa5a92ca4a3d97cf6904c54d3c788405d9f436b82f8329deb3","ssdeep":"3072:2bK6+K2pNYPptgncjVNid8mfL7WQmB2SzK3ywd14tRfNpb+0YbqRVJJqn249XG:2m6+KINYhtscU3WQfuKC8injJIlG","tlshash":"f714121ddd28de5b1355abebd73a044f88d29ca4d4315f66c2587a0824a6c2a2f3bec1","first_seen":"2026-05-18T23:45:39.191003Z","last_seen":"2026-05-18T23:45:39.191003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/gpt-engineer-file-uploads/DrWTwyFv2NcY8xRIw7MWZLBJW5n1/uploads/1761256750284-RoundedIcon%20(9).png","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.91","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:08.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:39:36 GMT","end":"Mon, 13 Jul 2026 08:39:35 GMT"},"fingerprint":{"sha1":"1F:56:63:F5:59:C3:43:F6:82:92:AD:A3:EB:51:A8:39:CD:95:72:13","sha256":"74:F1:8D:2E:8B:DD:7B:FB:BC:DB:C6:05:F8:4A:74:A6:10:6F:67:50:64:9F:62:A5:2D:0E:15:0D:44:28:36:AD"}}},"request":{"raw":"GET /gpt-engineer-file-uploads/DrWTwyFv2NcY8xRIw7MWZLBJW5n1/uploads/1761256750284-RoundedIcon%20(9).png HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AAVLpEgP3iJylAzcuhLufE96X3sWK4ea6BFwqQ5qVvNbxkVhibIImTIv5_ikyUPrypBwKxN3X_yoqg\r\nexpires: Tue, 19 May 2026 00:45:08 GMT\r\ndate: Mon, 18 May 2026 23:45:08 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 23 Oct 2025 21:59:11 GMT\r\netag: \"ea27f9dad37bd1f8d85d31a18910b2e3\"\r\nx-goog-generation: 1761256751025188\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 230969\r\nx-goog-hash: crc32c=WNmN/w==, md5=6if52tN70fjYXTGhiRCy4w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 230969\r\nvary: Origin\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":230969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"ea27f9dad37bd1f8d85d31a18910b2e3","sha1":"3d2f334dc3f5e7e009c6cfe1d01297ecd35981e3","sha256":"36b67440cf4fca90ad57c1755aa56c13ea6d17443d3a7f4202156e8583d91471","sha512":"cd2e8f00d8f55b308d40d7f199580be1b4030f0c0e75c02fb8d42997c6433d4d909c532ed208613589d48cea02af3407cb5fe9da2090bf032f9d55cc2b7e8fb3","ssdeep":"6144:KPv6FFD0avadWvYOeiNhaOiLSPMFTEdNpmto:KaQ2xdeYNiLSqTENoto","tlshash":"ce3412c9047bc5e1c75a450b938919f9ab7d362829f8291c27b6e52a0e409fcebc3dc5","first_seen":"2026-05-18T23:45:39.177851Z","last_seen":"2026-05-18T23:45:39.177851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":153,"receive":100,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/~flock.js","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fdebbd3ff6cb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-13T20:09:32.149098Z","times_seen":15466,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-trending-Dh_zArYQ.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-trending-Dh_zArYQ.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-portfolio-DRm7hJ22.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-portfolio-DRm7hJ22.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 145647\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"efd30d8ca08b3e07ef4d00e8a57921f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fdebbd70941b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 883 x 1920, 8-bit/color RGB, non-interlaced","md5":"efd30d8ca08b3e07ef4d00e8a57921f5","sha1":"9bd9377901df0221bdb18acf1f89104e4827d274","sha256":"d965b68b2153a4ac8472d95872ccfcd50fb943849127af5ea38e3c25373d30ce","sha512":"4b773636ef27daec324734821e6d7ea1fa7677a2c695785eea7f58e332c0986353e1deafdc897ed16d0b4b1af1c0da0b8bee8ff37e5de02857147071b4348880","ssdeep":"3072:Dk2RVcBC/H6Wkin5y+lB9nr5tmVh6BXqOgf3DfHVbgXdLmMQ:NVvS+lBMqdgf37VbgXdLmMQ","tlshash":"1be312547e3be3cb825c06b2ed08182f729f4c7cf1706138e0f086e516955a47eeb9a6","first_seen":"2026-05-18T23:45:39.193211Z","last_seen":"2026-05-18T23:45:39.193211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardanowallet.pro/assets/screenshot-send-DzpaLzyg.png","fqdn":"cardanowallet.pro","domain":"cardanowallet.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardanowallet.pro/","date":"2026-05-18T23:45:07.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardanowallet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 08:15:16 GMT","end":"Sat, 18 Jul 2026 09:15:15 GMT"},"fingerprint":{"sha1":"5F:5B:56:D3:0D:5F:0B:53:5C:CA:D0:97:44:3F:F3:B7:92:0C:B1:45","sha256":"AF:A4:89:11:4F:2C:CF:A8:B6:EB:1E:4E:25:B4:7D:69:DA:E1:00:40:52:22:94:91:0B:9F:DB:38:3E:1C:47:EF"}}},"request":{"raw":"GET /assets/screenshot-send-DzpaLzyg.png HTTP/1.1\r\nHost: cardanowallet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardanowallet.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=_UajcJ0a5QGcwijYZtgYT5KU6MuHUYkS7l3Yqw_AHVI-1779147906.7110565-1.0.1.1-lufCLkyOhsLjglXkZPGgveZbCSJsbgQ8XWWVARL7PHNKaWCtVdPa7xCvxStsdc9bbQKLWuqUcx.yMCpj0ek9MvuJk0pFZghMa0WnKCXF.qtXml..41VIy3tihOnWnC5z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 23:45:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 108615\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"66319541381eeba65577a2031af8a12d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fdebbd70944b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 883 x 1920, 8-bit/color RGB, non-interlaced","md5":"66319541381eeba65577a2031af8a12d","sha1":"98a8f50c56a4f171430256404c98b1ceb5be449c","sha256":"53f7748b68ae4632595d268c64d2cc26ed17cd7cd4e6e7d73b4cb31d4eb72d50","sha512":"2716f00cc027d35a2831c5c01f1f38838cf3f5eff35b11efc8692a62cd24f5f839f88a069e3ff9b5e75352f018be26e76a01457fccb121551c46c860598ef5af","ssdeep":"1536:LDGThv+7A2c/3p9aR1SUBQXE3Q2yjaQvAnvS7lsN4+J7ELXek324MaNCROQr7OQg:P4Tj/PobBWEg3Bg67lQt7Ef33oOi50","tlshash":"93b3e015c78cdb52cd61139f8a8f7a4826a7408a71c2b7b0a0b2c79ddcc331f9d5276a","first_seen":"2026-05-18T23:45:39.194869Z","last_seen":"2026-05-18T23:45:39.194869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"cardanowallet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}