{"report_id":"a2bc70fc-9990-4778-8306-9ff6789cea40","version":6,"status":"done","tags":[],"date":"2026-02-18T23:37:12Z","url":{"schema":"https","addr":"www.xmrwallet.app/","fqdn":"www.xmrwallet.app","domain":"www.xmrwallet.app","tld":""},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.xmrwallet.app/","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"title":"XMR Wallet Online | Secure Monero Wallet","dom":{"size":2327,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"63e00bee4d2280b792c597d43ccbbbd8","sha1":"64244ac7c79c020bf65cf76cff6bb1cc9655c661","sha256":"80722fd414796006c9aaa65f535b72ab17d5a5c3ec02a57492585d32b7ae7636","sha512":"44d23674d3c22e426a1a70264bfbbfb18e993316042c939c0aca5265c3025a4f18adfe6ada3ebe50142381833cd565093d10e6493c3ed9d38e129852279f82f9","ssdeep":"","tlshash":"b04110d6a6f3045a3d13e0642f7347492258e403d00edda93e9cb2eccf86584aca338e","dom_hash":"domhashd61b72e4f692789f32e9be4864e8f652","first_seen":"2026-02-18T23:37:18.345937Z","last_seen":"2026-07-12T02:44:20.359671Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.xmrwallet.app/","fqdn":"www.xmrwallet.app","domain":"www.xmrwallet.app","tld":""},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T23:37:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.xmrwallet.app","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":3703569,"sent_data":1361,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.xmrwallet.app/assets/index-D3v-wFTG.js","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c4e4261f7278da97f88d183b633d718","sha1":"e8bb01277787701ed6ef8a3d7f6b53ec2b383507","sha256":"e3e6b33e7adc79908e6f178e69de16838451b1f20d275722df7953ad68fd73c4","sha512":"d45701e25eca0f0a0bef90f6c6c7431c83c7250642f5ca0cc78f4198f0cabc8377accc85b2573d4f3bdcfcb51fff53f26a82558ae71277d34e6501813a705eb0","ssdeep":"49152:0I5U+maTe4C7lyC8Q+OlHroC1BTaj6+K3jtmxU3oZ6ifFKZ952Ko9Duu9n40n11i:95C","tlshash":"2b06b42a8e0e4e3fdfce23de7cda098405ec4127b53444a5dade8669421af8c7117e6d","size":3669704,"data":"","first_seen":"2026-02-18T23:37:18.362562Z","last_seen":"2026-07-12T02:44:20.364234Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f85d608d60997d486260ca04a55de3e9","sha1":"c2b48c5fdc9505b70cfa1547ed1beb1886e5c10e","sha256":"a4e4c73e82bfe751d4e626b37d2fe3d2b7120a90569a8ea8265300efd61ec5b1","sha512":"908d64af2c7c565e4bd90ebbf4d11602235b9d8b663a4b07a3a04bebf7bfe56a5c475e3838fdbc30dce6eee061dc63230162d40879dd35195b6206d403066ff0","ssdeep":"","tlshash":"3341ef86a6f3155a2913e0642f7747492298e407d00edda93e9cb2eccf865849db338e","size":2289,"data":"","first_seen":"2026-02-18T23:37:18.365473Z","last_seen":"2026-02-18T23:40:15.970714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.xmrwallet.app/","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T23:36:49.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 09:08:02 GMT","end":"Fri, 01 May 2026 09:08:01 GMT"},"fingerprint":{"sha1":"18:30:BE:46:B6:E2:FF:FB:FF:E4:D5:BE:B5:AA:63:CE:8F:4B:27:20","sha256":"0C:0D:2E:FA:C7:91:A8:EA:47:80:FB:DC:8A:38:FC:A5:AA:E3:79:98:86:4F:F8:8D:B6:DB:7A:2F:FF:1D:82:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.xmrwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 38126\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 18 Feb 2026 23:36:49 GMT\r\netag: \"209ecdb353ac502bdb8ce3214425716b\"\r\nlast-modified: Wed, 18 Feb 2026 13:01:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s4hx6-1771457809927-dfc9c4c55248\r\ncontent-length: 1103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2915,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"209ecdb353ac502bdb8ce3214425716b","sha1":"743ef4399c52dc8a30db34f544de8e8a75087909","sha256":"700913987715ffd4f736a5f4192f4880c4448c3f405e0ced2e392456d9341688","sha512":"4f7f37bdc1a3c16387a422e8387a74cb1e87f82fbe35c2d1ddffc9b2d873439b1b12cf16a4e6fd352d15e51b722e913d161276be04943ce2eb28f383d205c550","ssdeep":"","tlshash":"6251ec638b458d365222c33538e2b6bd4417c44bc6586da4b3ec225e2be9bc4daf33c5","first_seen":"2026-02-18T23:37:18.349216Z","last_seen":"2026-07-12T02:44:20.363404Z","times_seen":4,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":54,"dns":26,"connect":1,"send":0,"wait":10,"receive":15,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.app/assets/index-D3v-wFTG.js","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xmrwallet.app/","date":"2026-02-18T23:36:50.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 09:08:02 GMT","end":"Fri, 01 May 2026 09:08:01 GMT"},"fingerprint":{"sha1":"18:30:BE:46:B6:E2:FF:FB:FF:E4:D5:BE:B5:AA:63:CE:8F:4B:27:20","sha256":"0C:0D:2E:FA:C7:91:A8:EA:47:80:FB:DC:8A:38:FC:A5:AA:E3:79:98:86:4F:F8:8D:B6:DB:7A:2F:FF:1D:82:3D"}}},"request":{"raw":"GET /assets/index-D3v-wFTG.js HTTP/1.1\r\nHost: www.xmrwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xmrwallet.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-D3v-wFTG.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 18 Feb 2026 23:36:50 GMT\r\netag: \"765121d75f14b8cacc766a42986fb22f\"\r\nlast-modified: Wed, 18 Feb 2026 23:36:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6hjbg-1771457810106-ad296d0bbcd7\r\ncontent-length: 866756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3669704,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37528)","md5":"c79d2a0bf09f61437ed02369f54bf817","sha1":"719f1e1f4e017456d86157d80314a751756bd9e4","sha256":"9828974b7e73b95f7a64fec998b980fb9806edac5c2f40ffdf18d2dfa3650dc5","sha512":"1d66725cdfdfa525d9fd3ca66b9f5c0e7299af69ff77ddebbf90fa1bcbcf91981ee5e3da4c42a22605c8b97da4bfab9ce45dfff68c950cf4a1d20fd8162b642e","ssdeep":"12288:+xLI7tU+LkRp5aTe4VHM7lyC83th5ngP3cVf5PY+OlNOyroC1BRuD:+xLI5U+maTe4VHM7lyC8Q+OlHroC1BY","tlshash":"9d259138ab0dcd3bbbc903ca3cb2194884ec062676344479dd4ed1b95a66b9c3157fac","first_seen":"2026-02-18T23:37:18.352687Z","last_seen":"2026-07-12T02:44:20.360786Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.app/assets/index-DqkQA45w.css","fqdn":"www.xmrwallet.app","domain":"xmrwallet.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xmrwallet.app/","date":"2026-02-18T23:36:50.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 09:08:02 GMT","end":"Fri, 01 May 2026 09:08:01 GMT"},"fingerprint":{"sha1":"18:30:BE:46:B6:E2:FF:FB:FF:E4:D5:BE:B5:AA:63:CE:8F:4B:27:20","sha256":"0C:0D:2E:FA:C7:91:A8:EA:47:80:FB:DC:8A:38:FC:A5:AA:E3:79:98:86:4F:F8:8D:B6:DB:7A:2F:FF:1D:82:3D"}}},"request":{"raw":"GET /assets/index-DqkQA45w.css HTTP/1.1\r\nHost: www.xmrwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xmrwallet.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-DqkQA45w.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 18 Feb 2026 23:36:50 GMT\r\netag: \"9a7ae681bbc663f6a36a253e50617eb0\"\r\nlast-modified: Wed, 18 Feb 2026 23:36:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h4rjz-1771457810106-7f878e5400f4\r\ncontent-length: 6153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29302,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29301)","md5":"6072ca557b5a010824efffc54370ab56","sha1":"f3eaa9b123db0a3115a1a4419ad8261d87f9b070","sha256":"2f67805d192d46b99746a5630675a08d31732e414a720f10f1d21e5fe3e23b58","sha512":"9add0efbef7d54e720b79cc6f219b27728b1bad242828fb52d16dc5793d7600d8d79bce451b5fe75fa25e5267f816fbf65e7ba73bddff9fe5f3e99709894d2be","ssdeep":"384:HkGCduY4S+vWJMr6tXilnTs6uWo+3WmjiGlJPGSWn3SFJ5Km:hS7JC6tXilnTs6uWo+mmo6J53","tlshash":"37d255a4b32acc7fec2354ba676cf41c61097186ce26a7e8fe03251296c77f11d22725","first_seen":"2026-02-18T23:37:18.355789Z","last_seen":"2026-07-12T02:44:20.361895Z","times_seen":4,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}