{"report_id":"b8df34b1-3605-4107-a424-4c951394eb81","version":0,"status":"done","tags":[],"date":"2026-08-31T09:12:08Z","url":{"schema":"http","addr":"zksyncwallet.org/","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"172.67.146.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zksyncwallet.org/","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"title":"Official ZKsync Wallet for Desktop — Windows, macOS \u0026 Linux","dom":{"size":67521,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35716)","md5":"b5f7e9b28ab70825899222daf787a663","sha1":"69df8b961e24256d85035c0e5b29bb02a2034c0b","sha256":"f7c95893556955f8514cd2b4557062f0901399ade4dd17cf246e9e41048612a5","sha512":"37bce3e76dd186eaa3d5093152638018beb5370e7d720ece731502496cc0491f0e88e863182dd110ea1fce6ead33bdc0de2c5956bd43b5bd51d725419966888e","ssdeep":"1536:GwfEZJFgw00UiBp7jqJwnbhleiBeP1sv7IIlisZaRKmxFPJvPcpypjcyGq26n0X:Gw4DpUiBptBeP1sFZaRKmxFPJH2GjT0X","tlshash":"9b63b63760513b3b237712d9e131a7e5b1e6670dc1a3c46ca2fc52a177caec18613daa","dom_hash":"domhash7dd721ed51963f6f5e99de49f1605869","first_seen":"2026-08-31T09:12:14.530024Z","last_seen":"2026-08-31T09:12:14.530024Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zksyncwallet.org/","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"172.67.146.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T09:12:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"stream.binance.com","ip":{"addr":"16.76.78.253","port":9443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":283179,"first_seen":"2021-01-29T10:54:12Z","last_seen":"2026-08-21T14:14:22.100275Z","alert_count":0,"request_count":1,"received_data":240,"sent_data":607,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.174.5.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-08-25T03:11:55.250984Z","alert_count":0,"request_count":2,"received_data":83429,"sent_data":1001,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zksyncwallet.org","ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":21,"request_count":21,"received_data":962556,"sent_data":10701,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2300,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sysmon.powerroid.com","ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T08:07:14.201315Z","last_seen":"2026-08-22T08:07:14.201315Z","alert_count":0,"request_count":3,"received_data":22237,"sent_data":1477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zksyncwallet.org/assets/jsx-runtime-Cltr0gcK.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72059e47827263779ffb5e2e72fda9f5","sha1":"39bc063e3f7a76590befa8952db5f6c0b017ceec","sha256":"e26f105e9234109963ded8d5eba4b903477be697960ecda8ea710c5151aab8c3","sha512":"6cd8276949b7c2e19d2b3665c97bb8c6cd5c5df10ee84a0db4c980c6b520e2d45e3997de5d76fccaba1622052a35cd0689d878176511a8452d3d2745c5b4bbac","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlI4:XDlLy1fIlAclrIX1EwlI4","tlshash":"ea02c6c974d5f161169375b2807f50aaf33e2899284c6460b222d9f57df484cc917f9f","size":8430,"data":"","first_seen":"2026-08-13T09:54:33.74276Z","last_seen":"2026-08-31T09:12:14.591024Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/routes-C4len2en.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"489cc65e398c7d20c4a5970a087847cd","sha1":"d1aeb543683ef92f81097730821998c4973eaa98","sha256":"fd4d8a83d5312143a7693d797b6ffac065a33daed74944af19028619cae5e1f2","sha512":"72db351211a02a3561d684624e6951b55e733b07fac6d361c6a3e653ddd9eec653bf88abb38bb95940214c931c3ee446d9ea3a6b75e20aaf7915f37361215e28","ssdeep":"768:izV2hWnMsP7vHrDUzAySEbl/ta5Mw82M2IR:ipBMMHwLblta5MwopR","tlshash":"79137317f0657ae8f8365599746fe14d761fe008ee66a8b9f9b4300195108e8b333fca","size":42562,"data":"","first_seen":"2026-08-31T08:07:14.380074Z","last_seen":"2026-08-31T09:12:14.542861Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/from-download-to-desktop.png.asset-F4tm6ccP.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38b7242599b2f10fa1371b9896ddabd1","sha1":"3c14e3f904c0c28a39ba8739ce5ad1f0091d406b","sha256":"5636057af52ac076a0243aec5413477814c5b2ea09b30927564cd085da12e903","sha512":"ba04747e8579f4fc30b5a8a6c486b598474b0cf451a832fe32c863f7a848f25ae958d55be2b5f23f061e330068aa0dbe675f21a76519063c6b14ad375f4a8046","ssdeep":"","tlshash":"bde02b3f966640a03636566e91adf848c18a8a13cc93e94d52309865fbb040b086154f","size":413,"data":"","first_seen":"2026-08-31T08:07:14.37666Z","last_seen":"2026-08-31T09:12:14.568129Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/index-CRYdaB9e.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a02dc6577de4fc8e674b7edb079588a","sha1":"94dc9fbf1403b0e8db1e01d8e4a3699c283f7a32","sha256":"d1f122030353eae53149799443b4e88a701bf398091393b4f8998da473839aeb","sha512":"563fa89952bf7955ecb922059b7ff41134a3bdd01c39fa013ada3d99d481a78e13601f46d2050692627115d7c640c486d5ba1da4bf9d780973db58e390e683b3","ssdeep":"6144:AWOSleER8NFdwnbemxJ6fJdLmMMnwSm3oLAk2lBt0Vd:Ay56fkTMk2lB6L","tlshash":"eb944be93251b1221bf742a2907f150ab33a29175c0e4424f274edae36b598991f7ffc","size":408492,"data":"","first_seen":"2026-08-31T08:07:14.331019Z","last_seen":"2026-08-31T09:12:14.560843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysmon.powerroid.com/assets.min.js","fqdn":"sysmon.powerroid.com","domain":"powerroid.com","tld":"com"},"ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afa475050a351ff82b6674619517d97","sha1":"456345904000aab8f6be27aa7738251c0551cbdf","sha256":"3e9005d4b4eea2cd4d79147052675a9e9aa96d2c3e66d143f792682a50700e69","sha512":"bc3a160b144cea5212f2b6e001a3c902898bd6f4c0f6cafddb706f75f7d486043d047bbbe85448c4055f5587f57bb74529da1a5a27d155d62b85cb31382dfb9d","ssdeep":"192:7GZq6aKxKM2zgnw9yhgxmbkiOJSYIRSVTuIiUidRiyo76SbOgx0EzY1WNHtmBLpK:uq6zKmhgx0Yu5Szx0uMcwF4U6wRA9hZ","tlshash":"5082c6af2cc620325ca3e13a578fa106f337c457068adca27d4d4715afa467906acfc9","size":19192,"data":"","first_seen":"2026-08-22T08:07:20.226194Z","last_seen":"2026-08-31T09:12:14.571155Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/ZkChart-CN24i2n2.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6648a52a091bcd17a21a2f5474ead827","sha1":"bc2526ea553e4af2d911d80d8f0c19c28eb0a491","sha256":"95f2e4c30c4f2de76efa9c63eda676cac4d0e895f1be952f5cef25174247057f","sha512":"1eee03016021fc14e5c98998041684827dde425fb426e4af1ba63e9b2c6e6c3ccc9f90ef8ea728261ef7fa10bdabbd3294b9f41dbe836c4f3880f07a02666c51","ssdeep":"3072:eGbPx8N39QWII6Bo54lutIFHN6a2K4X4Ab0XgymnY:RbPxBFI6Bo54lutIFHN6a2K4IAYXgdnY","tlshash":"5cf3e7a5336ab4635399c2ba18350542f31a78c52c0a052cf57dacdb3da9d09b2fef74","size":166045,"data":"","first_seen":"2026-08-31T08:07:14.363748Z","last_seen":"2026-08-31T09:12:14.566747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zksyncwallet.org/assets/zksync-logomark-dark-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.932Z","timestamp":1788167495932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/zksync-logomark-dark-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:36 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3899\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJ3Uh3fwJMryvSldrritZOuLhio3POFxtgpfar75Aik2vdV0QYYqDcojvdALcoItYYeyzZxHkoIewfg6Fc0vzwjR3FJE3OykdVA0S1Pd15nHbw3joy41FB0XZupKBtDo8OFR\"}]}\r\ncf-ray: a33ae8a19f43b4f9-OSL\r\ncontent-length: 1878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1878,"size_decoded":2814,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"882f1ef9faa776ce358b8154cf8f6e11","sha1":"425009626b1a017a4a98e48a0c3c0dbf017f3ab9","sha256":"f686522665e5f232f9791593d83ab211b17b8a4b664bf32679acceb58d5e8e32","sha512":"861507360377f30090e4d3206090608d84ba97f92be18bdd5b03b98aca7b0dc6b06a26787310443e818d8309e591aa726188be960bb442634b3f92c8aa02ad7e","ssdeep":"","tlshash":"c64119d3c68d3a7a840f89bb1d04f7a1d1d69e509fcdade01ad09de8082af8611f04b3","first_seen":"2026-08-31T08:07:14.333072Z","last_seen":"2026-08-31T09:12:14.533959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/adi-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.583Z","timestamp":1788167496583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/adi-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TGyvw1DL7ahlqvS%2B6MsjzXW%2FAA%2BSXkia3dccTEX3bGKXsn4KO5AVD%2FAA6yW%2BFlmcvtDl2Malqvky6fxMgxdyb5i%2FPvhtx5nTkm48bbR6gz50AecfWd0afZJbgZhs9H793nd\"}]}\r\ncf-ray: a33ae8a5af97b4f9-OSL\r\ncontent-length: 6612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6612,"size_decoded":7560,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d40334a645bc2e4ea53eb86e5569e524","sha1":"ee0f0ac0c452907b7d9f2a76c388acd606c6ad7b","sha256":"0be60976bcc9fac18c4d4151857e5d08476d44ef10e481eba6b1ce1902adf05a","sha512":"0d58cc7cdd7228055b406b3bc9b14150013c627173965228bd9d78e33188b622acf6d681b5824478361d76c2dab40d1c36e4da918157414614f772fc2761c5f9","ssdeep":"192:kJGPhuMeIOFIXt0y1+c1guIx6GjWacDRCf:gikM5OFiuw+c1LIx68TcI","tlshash":"02d1af71433d102cd272a639f53c64f143dae93c2a9150ff943e98b9a10894f9f1ee86","first_seen":"2026-08-31T08:07:14.383094Z","last_seen":"2026-08-31T09:12:14.53653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/hero-laptop-640w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.934Z","timestamp":1788167495934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/hero-laptop-640w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:36 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bo5GphrjnfNrI4idp%2F7nzhytCvAHRKXKpNbSinaVnhk3IQwBPpwJ6pO8ykLSIK28bjjBW2I0N3zTq2ejOf%2BRNYjKv3tE05ZZsXiXg9cDsOWTtXhKfcbX8jU0RKGOSlHNkyCP\"}]}\r\ncf-ray: a33ae8a19f44b4f9-OSL\r\ncontent-length: 39290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":39290,"size_decoded":40231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"966d41b1422ae04b039a9a49b9c140a1","sha1":"b48c21be4536761f4f657cd40cfd93d57891ef70","sha256":"ffdf41ef828f431d180c383845929c255939366b31e32fc59fd4bd8afd7dc678","sha512":"91b111dbfb577270c84f7d96517a007499b0626e571391f28caad97fad05514ba545bf0be0e108c2f407e53d66b74d7e446ec1f8a4cc0529d7301947241a6d6e","ssdeep":"768:3QR4SAM2CaW43ERa/fXS9fwc2/08XJ+3FvvzaAHUhs+ZXnU/6NDYISBEN/fUXR:jSAMz4Ea/fCVwc4XJGzaAH6DXnDDYISx","tlshash":"e803e1f9e3fa907737d673dcd13ada6208c3dc6492a5cc450294e6237af186f508188e","first_seen":"2026-08-31T08:07:14.354701Z","last_seen":"2026-08-31T09:12:14.538753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.918Z","timestamp":1788167495918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 09:11:35 GMT\r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-31T14:21:20.648892Z","times_seen":42281,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/routes-C4len2en.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.922Z","timestamp":1788167495922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/routes-C4len2en.js HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 30 Aug 2026 13:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STq19ngyboITsGGgDK7wnZSPzA5umI%2FZi7UlE4iMIAv2OGsDn4vGXYM%2FHImAyQzHdF%2FQYc3N9ycSm77%2B8fukj4s%2BEUW0LzUsgRgYO7Uy5mdkiG1poKM%2Bjg19E5Cm6VXIzML9\"}]}\r\ncf-ray: a33ae8a18f3fb4f9-OSL\r\ncontent-length: 9730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":42562,"size_decoded":10682,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22016)","md5":"489cc65e398c7d20c4a5970a087847cd","sha1":"d1aeb543683ef92f81097730821998c4973eaa98","sha256":"fd4d8a83d5312143a7693d797b6ffac065a33daed74944af19028619cae5e1f2","sha512":"72db351211a02a3561d684624e6951b55e733b07fac6d361c6a3e653ddd9eec653bf88abb38bb95940214c931c3ee446d9ea3a6b75e20aaf7915f37361215e28","ssdeep":"768:izV2hWnMsP7vHrDUzAySEbl/ta5Mw82M2IR:ipBMMHwLblta5MwopR","tlshash":"79137317f0657ae8f8365599746fe14d761fe008ee66a8b9f9b4300195108e8b333fca","first_seen":"2026-08-31T08:07:14.380074Z","last_seen":"2026-08-31T09:12:14.542861Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/favicon.png?v=2","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.185Z","timestamp":1788167496185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /favicon.png?v=2 HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 13:11:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kqz36te14vvb3t4itOmk5dg4dWioZ6JtCm4tT%2B%2B4Cg9mLSkQD3MTlPYdm8z0cmkX8H6NhWzeya6GlEhjHI9KjsJ12vQnP40JYdWQbf7GMQCouRGgLASlyNizCwm7FKJ4OfpT\"}]}\r\ncf-ray: a33ae8a32f76b4f9-OSL\r\ncontent-length: 1888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1888,"size_decoded":2830,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"f3089d7cc812210bf390787df218ddfa","sha1":"10edfc55ed00643d8001e35b69bb82d8155fa0b1","sha256":"f7c2f6aed2c92e68f4fed74ff1f2b1d2233c2d095f25ee8965ecdc2e4407bb94","sha512":"f47bf43d32297eed259079dbd98d6c31859060f775129618ce2b352df01e509e6706eeb3286c892306104818805040c6d5864a8d7e7273d5271bea4f57d3ea3b","ssdeep":"","tlshash":"1641721388b15c9ee44bc1745733c821d921ba4fab33cca98682920ef94b6748dc36e0","first_seen":"2026-08-31T08:07:14.328692Z","last_seen":"2026-08-31T09:12:14.54544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.912Z","timestamp":1788167496912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 427212\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T14:32:41.62832Z","times_seen":272779,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/memento-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:46.120Z","timestamp":1788167506120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/memento-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:46 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:47 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyXEM3SXBOup48Va9Z2eQizWeC1E5K8duECNDRB8JvlIvJJvhfmBrk8%2BlIgb%2FLEnukpfyMgLSm9ht4IQv1qY4U%2FuLBd%2FACW%2BnKIhnhFIPIa4sWReShr3YARBh4LkvEkR%2FJ2g\"}]}\r\ncf-ray: a33ae8e14a6db4f9-OSL\r\ncontent-length: 5470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5470,"size_decoded":6418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a30534f88d59ae6e25122be0c351146d","sha1":"f915b9ed63216502ccd7e46b5ba0cf02411b0bec","sha256":"fccc81419873d364a17a3f5893ae33c812774db3abdc51b7641f0b70cc9f9171","sha512":"b9c9719c3df418a7bc25e84765e5498d503c747b2d8116f5cf3d0d4e9a8c9241234594c26be4c9b87cf322eddc2e0493578b6d4c44de2055fb3371cde1f4d001","ssdeep":"96:EbJJe0xdwfcch7WaasUGofAQXzbguDVl6LtpPP7e3v34vB2VKYhkrfy16:EPZYRiJsUGoIQ/guDeZFPC3PiBwnlw","tlshash":"e4b1aff46228d5f9903e326e4b8fe4773188da604c3a9502cc41dcbf64a0fb61c613d8","first_seen":"2026-08-31T08:07:14.373682Z","last_seen":"2026-08-31T09:12:14.549661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:11:35.009Z","timestamp":1788167495009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 30 Aug 2026 17:01:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrgP6HYj6c8nNbIsLuww0B7fnOl1xLhSngwj3xt4232oPfvAMKuHvmU4jrK46wEZhW2v9Q48jBVe1tXhgv7CyShr9BStpATr6kBRe6%2FLPXbTLY2Fxf8blJa2sfR5Ynd3vHN2\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a33ae89d4f0cb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":62164,"size_decoded":13631,"mime_type":"text/html","magic":"data","md5":"e53aa7e2e469abf5865788105ac359b0","sha1":"7a97ff0f9e0a90303587fae5704df5553f3e806e","sha256":"27c9341546715bc3a664fee81a2a5229606d1108d691c3aa0424df3a657b316b","sha512":"67d3e0046efe44a085e5511af4a84405493c383877f59b2066eda76591488c8f6bd7ba3f55cc7478a1f7676ffcf4e7d8d6f3649e2acd3684f6b53a111e3e6c6f","ssdeep":"1536:mwIEZJJpn00UiBp7jqJwnbhleimeP1sv7IIlisZaRKma2P1LpypjcSGq26/0GY:mwhtpUiBptmeP1sFZaRKma2P1dGjj05","tlshash":"1853a63760513b3b227722d5e131a3e5a1e2670dc173c47ca2fc929537caec68653daa","first_seen":"2026-08-31T08:07:14.378221Z","last_seen":"2026-08-31T09:12:14.552089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":0,"dns":212,"connect":22,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/styles-CUKLaRmE.css","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.915Z","timestamp":1788167495915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/styles-CUKLaRmE.css HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:36 GMT\r\nlast-modified: Sun, 30 Aug 2026 13:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FOCxybZZ8BOwVuPFhTAiEoOacnpC7gBCmkT1rNFx%2BCYzMTKS8S08H177WRPfKDwGzG4GXlxhHAFjK%2FM67HcaBE1MTmL3xm%2FGP3Lku1kqKh01wvDMOnVRPPyy0%2Fj4IXQRwHR\"}]}\r\ncf-ray: a33ae8a17f3cb4f9-OSL\r\ncontent-length: 21096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":134563,"size_decoded":22089,"mime_type":"text/css","magic":"ASCII text, with very long lines (65470)","md5":"03eb517c73952eba6050342c382fc3a2","sha1":"110b6b7c0d0deea978cd1c6c3fc49057a0d12388","sha256":"629b5a65f075d0812842f870589d37ed1beb52d5a5639480c459cfbb585aec1c","sha512":"dee629c41ddc0dfe820d59e41aa0696fd7649516b12cd31d5b37312ba8b92ebac44aef6288c76200ae32876a788257f5c2b7c0b9955cd24827aa31ca8c2f37ec","ssdeep":"3072:6ec2Zh+Qlo8inPHkby8wCPrC+8xMq+WDhY/Zkd:6ec2Zh+Qlo8inPHkby8wCPu+8xMq+WDX","tlshash":"28d3d894b234e23fbc37a9b4d7cda4cca108b051ed6687e9f965721246c3bf39932605","first_seen":"2026-08-31T08:07:14.336665Z","last_seen":"2026-08-31T09:12:14.554411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/anchorage-digital-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.063Z","timestamp":1788167496063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/anchorage-digital-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8CAS%2FsXa%2FIU1bSCx3zZdcIRXsIyQR1NK22PlfmLDtQAR6AkubDhL7VYm%2BIHHGqJIPv8D0nRUkG%2FWKBOfCdWBFwK%2FpNfg%2B7bxBmJaVoI5lvUG8UZrn2i7N62kDiDCgSJbGh7\"}]}\r\ncf-ray: a33ae8a26f50b4f9-OSL\r\ncontent-length: 7276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7276,"size_decoded":8224,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a40f9af262b20b10a8c9e7fb5052348b","sha1":"32784382c23180b0ae0b91226e109f5146d23832","sha256":"c3224ad9a01043bc0be62dbb0aca0a7f84bf6fcb24ce1dae6e2ad733ec66f709","sha512":"8cc6479e18c11e26fd5c69deaee5fa5faa04d50636e047bf2a4d0abc7619fbb415146231da1201bebca5ec22c999936e695ea9473f211fbf466ef655149d67c0","ssdeep":"192:Wfz+Fk35UcsoUwx5eub2vZ1tQf+jJrHUJxwpKtbv:Wfa+pUYSnZ1tQgH0mKbv","tlshash":"25e19f8ff103a964f0197435d33df3a71f47925f8e847e37ea99450432aaa96960a0dc","first_seen":"2026-08-31T08:07:14.375007Z","last_seen":"2026-08-31T09:12:14.556229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/fireblocks-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.066Z","timestamp":1788167496066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/fireblocks-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsHoMEfpyLljjYBG9YGLZk23PC3Hmw7Vh7R9kT4CEcVxo2ywf%2BR2hR9%2Fdj91Cf%2FvpTgf67bxDh%2F8W5W0RCID1tAzfUa01%2Bcej%2B9u%2BrvFCg3OM%2F%2Fm8za3lRiu7KDjql1oZd3X\"}]}\r\ncf-ray: a33ae8a26f54b4f9-OSL\r\ncontent-length: 4748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4748,"size_decoded":5704,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71b6dc67f5b4f018920a8212159ae5eb","sha1":"dee3e51038844a7e52b53ac46adc01834b28f3b1","sha256":"d60c79bb5b9d1e30328af746df1307d9197732dd553199efaac62050ad6beb10","sha512":"ed20bd541f1ce2b210014a63537b5f8754d0f3022a636f80d4ae417bb05d49130d302051f759a84b876bbddcc87a88366c2997535bc8a53a64b59367cf1b93da","ssdeep":"96:Wb1a9LkZ0dYSXyZhUpUW9cluTZ+WlDOikzc/HElVEUgaYaPdlo0:ySg/YpUW9cdjocQwo0","tlshash":"07a15c5ed3de4e0b86ed03af22e1658b00acf005e19719bdd11f2715909ff81b1216a1","first_seen":"2026-08-31T08:07:14.359743Z","last_seen":"2026-08-31T09:12:14.558168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sysmon.powerroid.com/p","fqdn":"sysmon.powerroid.com","domain":"powerroid.com","tld":"com"},"ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.172Z","timestamp":1788167496172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sysmon.powerroid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Jul 2026 18:22:19 GMT","end":"Mon, 12 Oct 2026 18:22:18 GMT"},"fingerprint":{"sha1":"93:F8:E9:73:51:CB:26:91:F2:67:6F:C7:21:14:AA:A3:B9:BA:42:87","sha256":"8A:57:71:04:92:2F:F9:99:C9:8F:38:C5:B4:4B:7F:60:87:11:0E:AD:EF:79:21:1A:67:C3:7C:E7:BA:7C:40:6A"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: sysmon.powerroid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nContent-Type: text/plain\r\nContent-Length: 230\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":230,"data":"{\"t\":\"page_view\",\"p\":\"/\",\"u\":\"https://zksyncwallet.org/\",\"r\":\"\",\"l\":\"en-US\",\"sw\":1280,\"sh\":1024,\"k\":\"CaH_tnkGWVFM4pAdUi0PXRaW\",\"vid\":\"v_b5a397b3cabc427bbd7ae21aa81248d0\",\"sid\":\"s_501bd909eee342669e4cbbf867f4d9e5\",\"dnt\":1,\"bh\":258}"}},"response":{"raw":"HTTP/2 200 \r\nx-request-id: c90b55f7\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), midi=(), autoplay=(), display-capture=(), publickey-credentials-get=(self)\r\ncross-origin-opener-policy: same-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\netag: W/\"b-Ai2R8hgEarLmHKwesT1qcY913ys\"\r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T14:32:40.870293Z","times_seen":18203644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://stream.binance.com:9443/ws/zkusdt@kline_1h","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"16.76.78.253","port":9443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:37.149Z","timestamp":1788167497149,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /ws/zkusdt@kline_1h HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zksyncwallet.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: GlVc1MDj/009qchA7ZTIfw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 31 Aug 2026 09:11:38 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: rPwPA12UI75FN1qCtPqlFmVGQwg=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":240,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T14:32:40.870293Z","times_seen":18203644,"resource_available":true,"data":null}},"time_used":2898,"timings":{"blocked":0,"dns":1063,"connect":1317,"send":0,"wait":258,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/index-CRYdaB9e.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.920Z","timestamp":1788167495920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/index-CRYdaB9e.js HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 30 Aug 2026 13:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cw6KiPpWt%2FZV5835WRo38XNbRFbNShQMCGBFIvlkE%2FbWAgJnnYeeqnypZBQsPHhgsL4JV1N59XmVMdIdnpfpax8tW38HbXxnIfbakLfQcoY5bZzqxQEj1K7lHZsA%2F1AhLWSF\"}]}\r\ncf-ray: a33ae8a18f3db4f9-OSL\r\ncontent-length: 118851\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":408492,"size_decoded":119799,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (51524)","md5":"1a02dc6577de4fc8e674b7edb079588a","sha1":"94dc9fbf1403b0e8db1e01d8e4a3699c283f7a32","sha256":"d1f122030353eae53149799443b4e88a701bf398091393b4f8998da473839aeb","sha512":"563fa89952bf7955ecb922059b7ff41134a3bdd01c39fa013ada3d99d481a78e13601f46d2050692627115d7c640c486d5ba1da4bf9d780973db58e390e683b3","ssdeep":"6144:AWOSleER8NFdwnbemxJ6fJdLmMMnwSm3oLAk2lBt0Vd:Ay56fkTMk2lB6L","tlshash":"eb944be93251b1221bf742a2907f150ab33a29175c0e4424f274edae36b598991f7ffc","first_seen":"2026-08-31T08:07:14.331019Z","last_seen":"2026-08-31T09:12:14.560843Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/card-bg-waves.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.040Z","timestamp":1788167496040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/card-bg-waves.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/assets/styles-CUKLaRmE.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 13:51:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGPdXbF6%2FJoDsrDciVIiSR42zHIzhSS2W97%2F7wiie5V4M1HTN3e1a%2Bnlt%2BOrHfgO7%2B5gdkNjwXtimpudU8DN3gaq04nq4WSSCzGiaugQgSD0eqOXZYWPfvySOVP4nJlTO0W%2F\"}]}\r\ncf-ray: a33ae8a24f4cb4f9-OSL\r\ncontent-length: 19776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19776,"size_decoded":20725,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1916x821, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a9eb9753d4d644019e8b27ff330d6459","sha1":"eeb386c698dd53e69cb2f99482f1b2fdbb1a0e4c","sha256":"4629f97c210497193864ec6669f34155f8a3e3e31720d93f8d7ab534757b678e","sha512":"29cd5815d3117197c6756edf0738795c2dc75dc7cac9a3505032e3003faa72f3a9290b9bfb42abad2149a90353570c6237e2838472a0fb8a117c4ffa63a5b16d","ssdeep":"384:+V+zZJFvIvgkWWrcETWVt5BMIJjJ1Geih2xlCyyjggKW2SvnbSAew7GnUo9p:+V+zZjvA4WJTWVXbdFysQxWbp","tlshash":"d592e13d3cd1d3618dd5f0a1cd91a0fab6722171d9820206ca9df6b465487ba8ff8199","first_seen":"2026-08-31T08:07:14.356217Z","last_seen":"2026-08-31T09:12:14.562561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.057Z","timestamp":1788167496057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 427212\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T14:32:41.62832Z","times_seen":272779,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/24hr?symbol=ZKUSDT","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.174.5.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.885Z","timestamp":1788167496885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/24hr?symbol=ZKUSDT HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 286\r\ndate: Mon, 31 Aug 2026 09:11:37 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: ab39a74e-c33a-4d0c-a4dd-6ec74a79c1e8\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4f3b3e4960def083f12c206ccc1d9d5c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P3\r\nx-amz-cf-id: -6VWqwY7DGAWFlRftTV7PuMUrbifG6cVtResWray2hdlWX9AXS5d-w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531,"size_decoded":1207,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dd958cf6f5378eff67c29f68aac0dda9","sha1":"fdd56a41afbf3b3df98e124a5b37d866e1df7416","sha256":"02769b66f999d9dd9b0cf612dfde25958d2a470afd8e69091888538cd3545740","sha512":"5639829642bf069103bf020debcdda75671d7eed72efa5fbd36b741c4f8358a381147532fa265a668e4ab2b54846622195f182cbc7e619e8e413735c33a8261c","ssdeep":"","tlshash":"f2f0e2f1a21c0e85c5bcadaad382b93010caf5878bd48f0009ee4aa903f4b3f6418745","first_seen":"2026-08-31T09:12:14.563891Z","last_seen":"2026-08-31T09:12:14.563891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/tradable-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:41.969Z","timestamp":1788167501969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/tradable-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:43 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9SwZMKgo9crDwHP3Gaq1G%2FiZypyWXNjXTCZ9k%2Fc3%2BQc0BUoxN1%2BApqPq%2FhQhg6l7WmJ8gPZLsHSQwUvxwNSYsU7e%2FaOXSBGqHGenW3x%2B2OK05daWpcP8ZMMvuX6xyY06TmP\"}]}\r\ncf-ray: a33ae8c759aeb4f9-OSL\r\ncontent-length: 6166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6166,"size_decoded":7116,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ebbe7d24da98758a3e3208fad7b15b7","sha1":"1bd9e301bf02b13082ec5d9e39d283dacc49305f","sha256":"b7a7283b39e98e721642ffe0422d7ee51365444a20d54b396bfddd655ae86d43","sha512":"a55db493f37d86b0752dc6c0ee2f113bd72bfed7343aa24912306c6bd00048010cb7af4b6f110078380e981760d31aa4804b56b3d4cc8037bbd1b8b23a0012ce","ssdeep":"96:wPZwBxE7z221cPcY6dVj983t6TmBCtc/1O8NAdwTyXlE+B0wFEAo3cx:O+KzJfPoFBEctO8Nwci7EAo3q","tlshash":"74d19e9033548cf890c235d155ec3514d0d1234978f3d9ba3baba2e4cd81de6b22896b","first_seen":"2026-08-31T08:07:14.352667Z","last_seen":"2026-08-31T09:12:14.565669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/ZkChart-CN24i2n2.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.261Z","timestamp":1788167496261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/ZkChart-CN24i2n2.js HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 30 Aug 2026 13:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2J%2BXAkybi5C5nK%2FI2IdenRvz7tFz4jbcZYAjMGZuDUvpK7OPtlD4Elgs3sl0OEFeNrvobW0qs3Frw5pDSNkiCrEnyCqHQrugmnfbrRzhO7SaFs4EgMuv9BlXMTbCRAJYJAB\"}]}\r\ncf-ray: a33ae8a3af7cb4f9-OSL\r\ncontent-length: 51674\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166045,"size_decoded":52619,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"6648a52a091bcd17a21a2f5474ead827","sha1":"bc2526ea553e4af2d911d80d8f0c19c28eb0a491","sha256":"95f2e4c30c4f2de76efa9c63eda676cac4d0e895f1be952f5cef25174247057f","sha512":"1eee03016021fc14e5c98998041684827dde425fb426e4af1ba63e9b2c6e6c3ccc9f90ef8ea728261ef7fa10bdabbd3294b9f41dbe836c4f3880f07a02666c51","ssdeep":"3072:eGbPx8N39QWII6Bo54lutIFHN6a2K4X4Ab0XgymnY:RbPxBFI6Bo54lutIFHN6a2K4IAYXgdnY","tlshash":"5cf3e7a5336ab4635399c2ba18350542f31a78c52c0a052cf57dacdb3da9d09b2fef74","first_seen":"2026-08-31T08:07:14.363748Z","last_seen":"2026-08-31T09:12:14.566747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/from-download-to-desktop.png.asset-F4tm6ccP.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.923Z","timestamp":1788167495923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/from-download-to-desktop.png.asset-F4tm6ccP.js HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 30 Aug 2026 13:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JY6vjUme3FEom0xRihDy%2BfgMVTen8Z4CDlfXK1UBFZHott2XXrpW0ubv%2FhZW9nF6j7yiElTCVnKneciLh0V95OFGjaKHM%2Bh17qEOSr00eYqurC6WmDJZDBQBcm6u0bt0erUq\"}]}\r\ncf-ray: a33ae8a18f41b4f9-OSL\r\ncontent-length: 224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413,"size_decoded":1169,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (413), with no line terminators","md5":"38b7242599b2f10fa1371b9896ddabd1","sha1":"3c14e3f904c0c28a39ba8739ce5ad1f0091d406b","sha256":"5636057af52ac076a0243aec5413477814c5b2ea09b30927564cd085da12e903","sha512":"ba04747e8579f4fc30b5a8a6c486b598474b0cf451a832fe32c863f7a848f25ae958d55be2b5f23f061e330068aa0dbe675f21a76519063c6b14ad375f4a8046","ssdeep":"","tlshash":"bde02b3f966640a03636566e91adf848c18a8a13cc93e94d52309865fbb040b086154f","first_seen":"2026-08-31T08:07:14.37666Z","last_seen":"2026-08-31T09:12:14.568129Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sysmon.powerroid.com/assets.min.js","fqdn":"sysmon.powerroid.com","domain":"powerroid.com","tld":"com"},"ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.926Z","timestamp":1788167495926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sysmon.powerroid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Jul 2026 18:22:19 GMT","end":"Mon, 12 Oct 2026 18:22:18 GMT"},"fingerprint":{"sha1":"93:F8:E9:73:51:CB:26:91:F2:67:6F:C7:21:14:AA:A3:B9:BA:42:87","sha256":"8A:57:71:04:92:2F:F9:99:C9:8F:38:C5:B4:4B:7F:60:87:11:0E:AD:EF:79:21:1A:67:C3:7C:E7:BA:7C:40:6A"}}},"request":{"raw":"GET /assets.min.js HTTP/1.1\r\nHost: sysmon.powerroid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-request-id: ac7009f6\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), midi=(), autoplay=(), display-capture=(), publickey-credentials-get=(self)\r\ncross-origin-opener-policy: same-origin\r\nx-xss-protection: 0\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Aug 2026 18:16:51 GMT\r\netag: W/\"4afe-1a02ab09638-gzip\"\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7167\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19198,"size_decoded":8212,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2afa475050a351ff82b6674619517d97","sha1":"456345904000aab8f6be27aa7738251c0551cbdf","sha256":"3e9005d4b4eea2cd4d79147052675a9e9aa96d2c3e66d143f792682a50700e69","sha512":"bc3a160b144cea5212f2b6e001a3c902898bd6f4c0f6cafddb706f75f7d486043d047bbbe85448c4055f5587f57bb74529da1a5a27d155d62b85cb31382dfb9d","ssdeep":"192:7GZq6aKxKM2zgnw9yhgxmbkiOJSYIRSVTuIiUidRiyo76SbOgx0EzY1WNHtmBLpK:uq6zKmhgx0Yu5Szx0uMcwF4U6wRA9hZ","tlshash":"5082c6af2cc620325ca3e13a578fa106f337c457068adca27d4d4715afa467906acfc9","first_seen":"2026-08-22T08:07:20.226194Z","last_seen":"2026-08-31T09:12:14.571155Z","times_seen":4,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":10,"connect":23,"send":0,"wait":29,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.036Z","timestamp":1788167496036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 427212\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T14:32:41.62832Z","times_seen":272779,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.038Z","timestamp":1788167496038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 427212\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T14:32:41.62832Z","times_seen":272779,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":19,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/chainlink-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.061Z","timestamp":1788167496061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/chainlink-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zm%2FD6bp1DqZnNpOK8fYP%2BPcOz0BHLw8lEQtW0BRmmT%2FPDi0kk4VKR2yBqXA1fIDwgjTF5T2DbxVhcgUQn6IrbqPv%2BnUF8iy7mcky5aZROr74pbnWryHUiPseqtRVY43%2BT7g\"}]}\r\ncf-ray: a33ae8a26f4db4f9-OSL\r\ncontent-length: 5914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5914,"size_decoded":6860,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"151a9eee7bb7fccf343c2e41a9613c32","sha1":"cdda1b66b155a820f9e9cfb6a4650cc7c799e817","sha256":"08b0390943eb0dfb895582133c0e75f671167e000c95f1e029b385d47dd61c7f","sha512":"375755a7cd7eba857270cd41671e45f3ee2ccb1c9da16ba52ae55c45d99c0636c37735731764e8921c29d1ca7d4f77ce2317dee076715d0d3b2a8252b473356a","ssdeep":"96:zIkDK3eS48/hsTo/IFg5ibWu8Do8qzTamyOF0tnK/kPFtK9HH:z/DD6px/Tibv8lqzTamyjK/kPQHH","tlshash":"e3c1bf5c2609a1fe99bf607145086f863e410d0a19c6b26a85f343df305ce1c647f272","first_seen":"2026-08-31T08:07:14.381485Z","last_seen":"2026-08-31T09:12:14.572968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/circle-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.064Z","timestamp":1788167496064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/circle-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmLI6N9yhlG03Zj0p0LPCGnB6BmhNVtLB%2FcJg7RH8yVBOai099XsaWBEVG%2FnKemvjik%2B3tXKAJfVqG1qdi5VX7duXNXvD0U63yh3HK6%2BujiqEufhYTDongkT9vLzTwD1WDlD\"}]}\r\ncf-ray: a33ae8a26f51b4f9-OSL\r\ncontent-length: 6234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6234,"size_decoded":7178,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f31e6fa654800c9be038f704552cb29","sha1":"dc1dd68ca7075740ab7c8e6a5bd050f0c33f5fd7","sha256":"05fdbd28872dd99809bea36176ecbe0fcddeb9ac0ff42b3e529a2a41ead6ea21","sha512":"e3db6c872bfe7427053f77752f11e4100caa79b864e20292b4dfb4a0037938dbbaca17cfb69726ff265aa9c036b54b81ab29d4ef9dfc5e53b4c1d99f988df2b6","ssdeep":"192:jpsY6/+D2UzNahrebDWIIE57AP+JafkPqfgCID4Tjj1:jS/+D2UJahSbDIERAPyafkPqCETl","tlshash":"86d1affca26326cdaae7ec48e7ec94d24ccb3c512948b5b625f0053589c1f18f58668d","first_seen":"2026-08-31T08:07:14.348844Z","last_seen":"2026-08-31T09:12:14.583212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sysmon.powerroid.com/p","fqdn":"sysmon.powerroid.com","domain":"powerroid.com","tld":"com"},"ip":{"addr":"207.180.217.13","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.182Z","timestamp":1788167496182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sysmon.powerroid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Jul 2026 18:22:19 GMT","end":"Mon, 12 Oct 2026 18:22:18 GMT"},"fingerprint":{"sha1":"93:F8:E9:73:51:CB:26:91:F2:67:6F:C7:21:14:AA:A3:B9:BA:42:87","sha256":"8A:57:71:04:92:2F:F9:99:C9:8F:38:C5:B4:4B:7F:60:87:11:0E:AD:EF:79:21:1A:67:C3:7C:E7:BA:7C:40:6A"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: sysmon.powerroid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nContent-Type: text/plain\r\nContent-Length: 178\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":178,"data":"{\"t\":\"web_vital\",\"m\":\"FCP\",\"v\":1101,\"p\":\"/\",\"k\":\"CaH_tnkGWVFM4pAdUi0PXRaW\",\"vid\":\"v_b5a397b3cabc427bbd7ae21aa81248d0\",\"sid\":\"s_501bd909eee342669e4cbbf867f4d9e5\",\"dnt\":1,\"bh\":258}"}},"response":{"raw":"HTTP/2 200 \r\nx-request-id: fb6f66c5\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), midi=(), autoplay=(), display-capture=(), publickey-credentials-get=(self)\r\ncross-origin-opener-policy: same-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\netag: W/\"b-Ai2R8hgEarLmHKwesT1qcY913ys\"\r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T14:32:40.870293Z","times_seen":18203644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/favicon.png","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.184Z","timestamp":1788167496184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 13:11:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jtW3ihetWOJJToa66p2%2B1xQmoBtjNq1Q6x4u6IsBvphMKUCMUTYns2YXHiN3z0dMD76jJFAA0%2F4nCm4KA7QrszWutk%2FDsuyAUdqWLlcLANfZfGFylNemc4Jm6CAu8kY0yDS\"}]}\r\ncf-ray: a33ae8a32f75b4f9-OSL\r\ncontent-length: 1888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1888,"size_decoded":2832,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"f3089d7cc812210bf390787df218ddfa","sha1":"10edfc55ed00643d8001e35b69bb82d8155fa0b1","sha256":"f7c2f6aed2c92e68f4fed74ff1f2b1d2233c2d095f25ee8965ecdc2e4407bb94","sha512":"f47bf43d32297eed259079dbd98d6c31859060f775129618ce2b352df01e509e6706eeb3286c892306104818805040c6d5864a8d7e7273d5271bea4f57d3ea3b","ssdeep":"","tlshash":"1641721388b15c9ee44bc1745733c821d921ba4fab33cca98682920ef94b6748dc36e0","first_seen":"2026-08-31T08:07:14.328692Z","last_seen":"2026-08-31T09:12:14.54544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ZKUSDT\u0026interval=1h\u0026limit=500","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.174.5.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.565Z","timestamp":1788167496565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ZKUSDT\u0026interval=1h\u0026limit=500 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nOrigin: https://zksyncwallet.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 22290\r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 72d57cf7-8381-4374-9924-d27340d50d37\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4f3b3e4960def083f12c206ccc1d9d5c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P3\r\nx-amz-cf-id: c300AIYXRO0bBygrR1qKFp2FC8nNvfW876pNK5LL7JwLI6pMUYNT5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81054,"size_decoded":23213,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"150f2cf9bbc4c3ca1c64df23344a37d7","sha1":"1667d7e24cf63f98413821039fc6d30f30718818","sha256":"1564f619977b9e20e0bc3fa8af596dde24c9db7bbfbe380bd679cd3c7d660447","sha512":"5b2fd3f1a8d45025566674e84b0581453b16aff9129d2c84747af977ac05c9f4639f09ad60b45fddfa79488ec405edeb49b4386113f61df1960d58b373f33595","ssdeep":"768:C0QYlChV3emvX+I2Od41t5Z8V0DkgLXYyCCX7AAQHj6XcePnZTPXe0Qcm8HHQzaz:C0Aqtr8jgVrAAwj6XFV3QhOj","tlshash":"eb83d3c1036846a0faf94c2de795f8615e7bf01eaecd0fd089e1a12f99e54b31a18f51","first_seen":"2026-08-31T09:12:14.585603Z","last_seen":"2026-08-31T09:12:14.585603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":260,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/ripio-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:39.420Z","timestamp":1788167499420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/ripio-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:40 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Be9h6xv2TGmN%2FkhWR%2BoEgvpCvVK7gWg7alUJ3QrGQMkMG61d3%2B9D0SVdt35l3OIf7WCCtX7rcKF5Zs6I15UO6pdgS5HPNO4N5%2BHz7Kfm9wcjgXNqjTGH83Hqey1tjSJnZJgk\"}]}\r\ncf-ray: a33ae8b76917b4f9-OSL\r\ncontent-length: 7072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7072,"size_decoded":8016,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef5b3bf8376945070c05fcec613c499b","sha1":"288ef26cd659bbd826db0dae2871c7ba3bae74d3","sha256":"8429fc1a88e50b2d32dc417e35d572fac6ec49ccc6a38f62e5707c3bd1780820","sha512":"2d03585ed682d431179a783b6f69d7d0e895e23478c298cbe3dc27fc0b1c564bc8961afe7ea385d3dc455601f22b513eab751a32cd4b329221b9274a9f9cdbf2","ssdeep":"192:nzhOx0aNuJtH5YG25N9idElKNCqDIeLSi2PQi0UuHShPQE/E:nzhVJtHR25/aa1qDTSi0ESCoE","tlshash":"42e19e17dfa90cf43297a752441c061fd38db1a4d09e382a17753835ca6888bc03b0b8","first_seen":"2026-08-31T08:07:14.350903Z","last_seen":"2026-08-31T09:12:14.58851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/partners/xsolla-320w.webp","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:36.062Z","timestamp":1788167496062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/partners/xsolla-320w.webp HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 08:06:37 GMT\r\nlast-modified: Fri, 28 Aug 2026 16:20:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3898\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9F3TZSqb957nBP3uNx7SAU6n1SJSrQ%2F4unsU2BH4aTci%2FiTJ7MZTDdsk%2BPxj3PRJWcH5Vt6t6IZdJ2hyYy4H9rYsKILZN6oZGVWHxu%2FGoLFdfiIbpyoDXoqi7rv83B3Hw72C\"}]}\r\ncf-ray: a33ae8a26f4eb4f9-OSL\r\ncontent-length: 5850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5850,"size_decoded":6794,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f393b67e560232b8b463a6c342908798","sha1":"a7833e0037db05c5e04b79fe3572474eef2046ba","sha256":"92a8c9e70470e3687244891573358d7c25db68c619e455ff05157631f563714e","sha512":"f6a816dc8249ed5e3ee512d9f8333278d4846304e8727c48087cf5883ea9f909034f343a4adfab80bd31fa7e8e246258e315a70e236574b66b6cdb9c015c0ce5","ssdeep":"96:bLFkZQ6M1EsEFS/5N+8fir0rw07zBR39uY20jxP0KnJ5JihHpUyJZyzAT:vthTE0/5N+Rqh7zBRtumxp3J8pVJ+4","tlshash":"d5c1af139c4e70bc988baa71dc1c1d42ed4bde6dcc563e7ae10190ebd355491cab0974","first_seen":"2026-08-31T08:07:14.357743Z","last_seen":"2026-08-31T09:12:14.589884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zksyncwallet.org/assets/jsx-runtime-Cltr0gcK.js","fqdn":"zksyncwallet.org","domain":"zksyncwallet.org","tld":"org"},"ip":{"addr":"104.21.87.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zksyncwallet.org/","date":"2026-08-31T09:11:35.921Z","timestamp":1788167495921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zksyncwallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 14:02:50 GMT","end":"Sat, 28 Nov 2026 15:01:17 GMT"},"fingerprint":{"sha1":"17:69:3A:E5:36:7B:C7:61:D7:B0:3B:7D:28:05:5F:91:BB:B5:71:34","sha256":"0B:7F:D7:24:A8:0D:EC:AF:9B:C4:CB:D1:B7:50:95:9F:1E:E8:40:A9:BD:31:88:26:B6:94:76:1A:6F:62:F0:6A"}}},"request":{"raw":"GET /assets/jsx-runtime-Cltr0gcK.js HTTP/1.1\r\nHost: zksyncwallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zksyncwallet.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:11:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 30 Aug 2026 13:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBEUZy2IbcqlrIRaHzgvql%2BphXOlRcNSiA4psalFvsb0Wlxgl4%2FuTFy9lkKnGTE9cpuXr%2FFGsl2b1jZRVYDkJeGEPSl54U8uoNRqCh%2BuxA7ttS0iu6XFzQ5Ft2qvNr3QJwKz\"}]}\r\ncf-ray: a33ae8a18f3eb4f9-OSL\r\ncontent-length: 3100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8430,"size_decoded":4048,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8430), with no line terminators","md5":"72059e47827263779ffb5e2e72fda9f5","sha1":"39bc063e3f7a76590befa8952db5f6c0b017ceec","sha256":"e26f105e9234109963ded8d5eba4b903477be697960ecda8ea710c5151aab8c3","sha512":"6cd8276949b7c2e19d2b3665c97bb8c6cd5c5df10ee84a0db4c980c6b520e2d45e3997de5d76fccaba1622052a35cd0689d878176511a8452d3d2745c5b4bbac","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlI4:XDlLy1fIlAclrIX1EwlI4","tlshash":"ea02c6c974d5f161169375b2807f50aaf33e2899284c6460b222d9f57df484cc917f9f","first_seen":"2026-08-13T09:54:33.74276Z","last_seen":"2026-08-31T09:12:14.591024Z","times_seen":5,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"zksyncwallet.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}