{"report_id":"b560713f-39e5-45ed-8afe-f7a86b8f6489","version":0,"status":"done","tags":[],"date":"2026-06-25T01:08:18Z","url":{"schema":"http","addr":"zcashwallet.app","fqdn":"zcashwallet.app","domain":"zcashwallet.app","tld":"app"},"ip":{"addr":"64.225.8.153","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"zcashwallet.app/","fqdn":"zcashwallet.app","domain":"zcashwallet.app","tld":"app"},"title":"ZCash Wallet — Private, Secure, Non-Custodial","dom":{"size":872700,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52253)","md5":"7b2bb74fa3ece79dee4ebef512ccfcab","sha1":"ec6f0637be9336b69fd44f13362f1e162be9ca4a","sha256":"e5e20223ac187239f59ceebe43b846b691a268fa6be5b3fed8bd71d954fe692f","sha512":"81d6be76aa21d89e094ef6d03217194be3fd39e169f3919a54db003536400017fe4f2b70a544ba7b7e5646e00c0086dff9a852253d840c8bdb7e29e99b05d5cf","ssdeep":"12288:Xd14xkYSj5MckPKUZXoON628OoUn0HA27DLo63pylN/BlF/2E40348w3q0BukjjR:XLckIFVoP2gHA27Dls12E403o609j6s","tlshash":"4d052a7a494d67af7a329c5dcb06283f5d8510eca208d5cf694fb2f8d37a864892dc70","dom_hash":"domhash2d793389db1aded0b9d2cc28ac9db8b7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zcashwallet.app","fqdn":"zcashwallet.app","domain":"zcashwallet.app","tld":"app"},"ip":{"addr":"64.225.8.153","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T01:08:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"z.cash","ip":{"addr":"172.66.151.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-12-22","domain_rank":176155,"first_seen":"2017-01-30T08:14:26Z","last_seen":"2026-05-05T16:04:37.741162Z","alert_count":0,"request_count":1,"received_data":40555,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zcashwallet.app","ip":{"addr":"64.225.8.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-25T01:05:00.428837Z","last_seen":"2026-06-25T01:05:00.428837Z","alert_count":0,"request_count":2,"received_data":874098,"sent_data":990,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zcashwallet.app/","fqdn":"zcashwallet.app","domain":"zcashwallet.app","tld":"app"},"ip":{"addr":"64.225.8.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T01:07:46.392Z","timestamp":1782349666392,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zcashwallet.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 20:37:06 GMT","end":"Wed, 16 Sep 2026 20:37:05 GMT"},"fingerprint":{"sha1":"36:C7:47:C7:56:CA:5C:6F:A6:E8:B5:D1:DD:1C:2C:A6:D8:40:FE:E1","sha256":"56:E3:B7:90:33:07:F1:CF:CD:18:1A:15:59:93:29:09:6C:02:D0:C9:42:C3:21:EF:0A:C1:DC:69:38:70:A2:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zcashwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 25 Jun 2026 01:07:46 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 18 Jun 2026 22:23:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a346fe8-d50b1\"\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://z.cash; font-src 'self'; connect-src 'self' https://api.zcashwallet.app;\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":872625,"size_decoded":495887,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52315)","md5":"d2477fece52806b135184b578edf439e","sha1":"ace38e2030be12d3e502d984fd34871d23ed7ef1","sha256":"129162cdfb9347c0b7653d0c85a07accd9b9f22aaafd1d23cd9064ef20ba307e","sha512":"ca2205baddfb3714d56f064e0412c670da94f98a4395b82bae667e572f1ddf87fa1dcde72fea31c2ac95c6364824c7dffac48204b89d1c0b9c3ee68ca9e032ec","ssdeep":"12288:kd14xkYSj5MckPTUZXoON628OoUn0HA27DLo63pylN/BlF/2E403/8w3q0BukjjB:kLckIsVoP2gHA27Dls12E403V609j6a","tlshash":"36052a7a494d67af7a329c5dcb06283f5d8510eca208d5cf694fb2f8d37a864892dc70","first_seen":"2026-06-25T01:05:05.951622Z","last_seen":"2026-06-25T01:08:19.961284Z","times_seen":2,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":35,"connect":99,"send":0,"wait":194,"receive":391,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"z.cash/wp-content/uploads/2023/03/zcash-logo.gif","fqdn":"z.cash","domain":"z.cash","tld":"cash"},"ip":{"addr":"172.66.151.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zcashwallet.app/","date":"2026-06-25T01:07:47.384Z","timestamp":1782349667384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"z.cash","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 21:03:41 GMT","end":"Sun, 02 Aug 2026 21:03:40 GMT"},"fingerprint":{"sha1":"5B:20:6D:40:ED:9B:60:29:24:BE:0C:3F:17:CA:DA:66:BB:D4:5D:9C","sha256":"F6:61:E5:74:30:9E:0F:19:73:D9:BA:74:67:C0:AD:DB:5C:62:65:45:61:D6:41:A0:6C:26:DE:8D:D7:4F:84:F3"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/zcash-logo.gif HTTP/1.1\r\nHost: z.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zcashwallet.app/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 25 Jun 2026 01:07:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 40116\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 17:43:01 GMT\r\netag: \"6a3039a5-9cb4\"\r\nexpires: Fri, 25 Jun 2027 01:04:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 199\r\ncf-cache-status: HIT\r\ncf-ray: a11013f53d130b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40116,"size_decoded":40555,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"0b7382b56cf3de3262d4aff2a2b291e5","sha1":"c90c3e466d2977bdbde902b0c9f988853c656cea","sha256":"48b9b27318fa9ecd431e0b596dfaa19bff49c17691597c119e5cad551a9f58f6","sha512":"bc307b2c0e1279f16c0eb8cfb7883a678caf896c42ced3ef1dff8ca9c46da10367f867a10ac22bc739d5d513bb22fcf1754ca545440f99a9795e5a7d650347c6","ssdeep":"768:EPclq8998lL0cgHx8sOW4gLMMt8rHlnU7jCuyCn6OA9/nqPU+bgDafkeilGOZzZ:EPKq8o3gHx8XLlnU9yI61/skakH","tlshash":"6203c0ffc25f5132f42648b846646b6617f6cc361ede47a70e2df092adf54bc1a28881","first_seen":"2026-06-25T01:05:05.952803Z","last_seen":"2026-06-25T01:08:19.963787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6420,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":12,"receive":1,"ssl":6400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zcashwallet.app/favicon.ico","fqdn":"zcashwallet.app","domain":"zcashwallet.app","tld":"app"},"ip":{"addr":"64.225.8.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zcashwallet.app/","date":"2026-06-25T01:07:47.526Z","timestamp":1782349667526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.zcashwallet.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 20:37:06 GMT","end":"Wed, 16 Sep 2026 20:37:05 GMT"},"fingerprint":{"sha1":"36:C7:47:C7:56:CA:5C:6F:A6:E8:B5:D1:DD:1C:2C:A6:D8:40:FE:E1","sha256":"56:E3:B7:90:33:07:F1:CF:CD:18:1A:15:59:93:29:09:6C:02:D0:C9:42:C3:21:EF:0A:C1:DC:69:38:70:A2:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zcashwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zcashwallet.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Thu, 25 Jun 2026 01:07:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://z.cash; font-src 'self'; connect-src 'self' https://api.zcashwallet.app;\r\nPermissions-Policy: geolocation=(), microphone=(), camera=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":750,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-22T08:26:17.392756Z","times_seen":542740,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
