{"report_id":"c23d9e96-9708-4d71-b449-6bcc83561baa","version":6,"status":"done","tags":[],"date":"2026-03-20T18:45:54Z","url":{"schema":"http","addr":"wallet.0x0.su","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":0,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"title":"MyEtherWallet.com","dom":{"size":121057,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (820)","md5":"0bf3534926d777a2531fa81844e096ae","sha1":"252f22511676344af8bfbefda8c94b70c6c828bc","sha256":"44e2b58abcb61e9562ddc3f565e537732d246170b1ba936b6062b208f9a790ec","sha512":"f7497ed194fba2de9bb3a0cf10537d1ccd15db10e77a581a79fdf32284111a42472bf00c949def70da6bacc3f8f4c606b58043b3ca8b036bb0990f7557a107bb","ssdeep":"1536:ajujjtez6CL8v36iojPmWMUvIm32QojDEzxjZpDS:ajEti6CL8v3l+mNUvIm32Q4ExZpG","tlshash":"70c3e820e1f12e7b024749d5a7ba6f9bbee68857c509154173fc07c01ffac96a81f298","dom_hash":"domhashd9aa114e6b40f8914d821e0ec887da89","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wallet.0x0.su","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":0,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-24T18:45:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"node.0x0.su","ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-10-07","domain_rank":0,"first_seen":"2026-03-20T18:45:55.680515Z","last_seen":"2026-03-20T18:45:55.680515Z","alert_count":0,"request_count":4,"received_data":1406,"sent_data":2066,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"wallet.0x0.su","ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-10-07","domain_rank":0,"first_seen":"2026-03-20T18:45:55.662086Z","last_seen":"2026-03-20T18:45:55.662086Z","alert_count":104,"request_count":26,"received_data":6627984,"sent_data":11823,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"146efa769a4318d3766253e845089eda","sha1":"be10e1ccb5ab6160bebdafcab684a2fc33286643","sha256":"67143e19cbd638d0d71855cb968a7505ab973c8680dd7e3dd4d5d47661d4555d","sha512":"0213a4cb3fbb4a3386098115c9cec86e394c4a94df4a2127b090efce137ab482467fbc774fad599be7300c90f850b9e4bba52477d9705d4a4343699cf53041c3","ssdeep":"","tlshash":"cde055c22a46960327fa50f0148b60c2a91ceb39f6b85ee4a99bd578047252ec53e20e","size":436,"data":"","first_seen":"2023-04-12T08:49:10Z","last_seen":"2026-05-09T20:35:41.821163Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"cfc40496a73b47921da46c7c406f5018","sha1":"b2264506edec1707a7646b73a00dcce54c2daa5c","sha256":"383b12437412686949630c263d50c5a9e92351ca60d3954349e76c1a1b6a4b24","sha512":"0f391edb684220b6660d6a15cda10d8d5dc472de1b5b429c41d4f534dc642555a87d7ff14d934b03d5ff5b5dfcf8dddf5512cabb70e03e176900ec6757e91240","ssdeep":"","tlshash":"dfe026813d95a02593aa00d0e48f684bb958ae33f3888499a783887c18ba125802a60e","size":317,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-03-20T18:46:06.59168Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/js/etherwallet-master.js","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2906e271589ee8d34690f1a2c9011e8d","sha1":"a5953dc30533f44da25094406a53bedda043df90","sha256":"49fd67383348d4511441f17fb9500128b27f72e202178a65f2e955787a2c65fa","sha512":"057411a867d19facacf74021fba28c6e942ad56980cd0f720dca2bc75ccaf92ade0d2ffd17da49e460a3104f57e3cf321a4872837a3c738045a1433f38fcd117","ssdeep":"","tlshash":"a211e1cc61923cdf515966b0125f860bb0f4ab53404c5800b89ecafd0ff481b857252f","size":1000,"data":"","first_seen":"2026-03-20T18:46:06.608637Z","last_seen":"2026-03-21T00:09:00.430786Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"7840e5f4eb8d13e7d5f73d01cf876134","sha1":"9faffa6bf375971a84b96fb0f844eb60c465f3ef","sha256":"f3611bd88031f9fe5ce1236b596b8d0bf0c9757423771e87ae7f18a877f80d2b","sha512":"9a60ef1f6e4a509e0e5b3c3be0ae5e0c58f6f4bcd3ab01d667a0297b3c30080c35ec6e36f051b625441d2a0921ca1cf3bfe8453d25d6143f539a9cabdde3949a","ssdeep":"","tlshash":"daf02ec2256d54b1d7d840e558cb7067d47f7775f045612aca44c124353b444f4a770f","size":454,"data":"","first_seen":"2023-04-12T08:49:09Z","last_seen":"2026-05-09T20:35:41.815444Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"d6e6f775358b788c89ada2ffd973b8c1","sha1":"b2ae950811030d135aff16ca7f5e700b0bb20939","sha256":"1aff3b3dcdfb6108e2367df0f6ad1c5537c001adb984c364a5b85be97a399928","sha512":"d35b71232cf13abd67485a61c3ce0e25ce314afe4f1eb2be447f44013c9e647b77e6a4d6e7415aa1a22916f9cc9e833cb115965cd1d97bc2ae18b842dca21ef3","ssdeep":"","tlshash":"b6f0898eaef4b02717e840f5107aec51dced3d7991547382448ab79a7939108983fb4d","size":531,"data":"","first_seen":"2023-05-23T03:30:05Z","last_seen":"2026-03-20T18:46:06.6135Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"c3dd871ad2cf67ca0e2fe22e71aa69be","sha1":"1e73d8658a19480e387d74bf2354799054c861da","sha256":"070041e05c20ab55a190c97e3c083bd6a33217dcddf76388a1eafd4cb9119b76","sha512":"7d4d789b4ece4c8f2d40188fc79067a76ae7b52111de0f74ade4568a51b7fe2ce835e89e510d0ba01f015f3dfe423f70e1011829c4bca5efa6f8ac29532a6d49","ssdeep":"","tlshash":"95e026c23a899456076510e4d45f9c4189aeb9705588c9069ac4c1b43cf3018d53fa6c","size":314,"data":"","first_seen":"2023-04-12T08:49:10Z","last_seen":"2026-05-09T20:35:41.829701Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"cb955ef22d3e74583b50eedc6e43bcd1","sha1":"a80f2c55e23c38ba4db5fb3d8707533ede9fdbf3","sha256":"313565273235f36866979ad9f193794b7fed5f41fdfc50f2f41d87a7dd60cd68","sha512":"457e4a0e933b4f054bb511c35d80f5199de6931d562d5a2e7c9148d32031a1f206ecf4be5d466a32d5e27150f3a0154f9791f576ab71bf8691d9f785736df645","ssdeep":"","tlshash":"fff09e473a1dd211277910c014cff5e29558df3763b476d4c9c2c92c103252a913e70d","size":473,"data":"","first_seen":"2023-04-12T08:49:10Z","last_seen":"2026-05-09T20:35:41.831164Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"37a4c6edb9dd1150ce4735a5f93ee84d","sha1":"305ad4e1a736dffce60c2085d239a59d6c4416f0","sha256":"554fee03874c5ce7de30df014a79deb1f7015c621d6b62ecdb9cb3ad23524598","sha512":"d0db015763ceac057e78e5b016ea4063298f1055db728a60f609ea15f25a308cd07d3a75737422ebafbeb0818eaef8b13b0078281523d82dfb9e2c094186e953","ssdeep":"","tlshash":"b6e0aba17a68e421073420f08c4fb0d29879ee325758f495d2d2c42c387281ce23fb9d","size":412,"data":"","first_seen":"2023-04-12T08:49:10Z","last_seen":"2026-05-09T20:35:41.816403Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"45166275cab24126435815b859af479a","sha1":"b96d5410823f9a17314a4f187b6a1b5f0c2e78e8","sha256":"ed068ad547e28ea625fcdcd57e7b4c5f7b30dbd489a1e897a7bab93a9a27bf6b","sha512":"4145b66ba99ffc51b8019749e996e06c1f26b99f421c4322cf21ffccab1708a4b9034307bec715a417d3746e5e8066b5819dd7fabca883bc5618dc6e0f719336","ssdeep":"","tlshash":"cfe020993d8db435137510f8e04fd84259adf974454cd819db82c3552e32004d17ef5d","size":338,"data":"","first_seen":"2023-04-12T08:49:09Z","last_seen":"2026-03-20T19:37:08.533048Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"d90d267a2a00a670fa5171213947c7ad","sha1":"8b3acd40a610a5eb0e71a180a5133836cac97530","sha256":"dbe0f48831cc72ecc7616b3a8ecc91a59956032548bb0fa20304423e86d5f86d","sha512":"a37e44c503da21c49f96b9bb8bad71271418935c1e9a1607940a385ee1e50aa15d76a2a28363946768f8ce997ee35ef787daa50443b88977666e7e83536f28c9","ssdeep":"","tlshash":"44e068e33d4491a753f510d0609b8d82985dea70968888848491c12c2aff404c7ff30c","size":353,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-03-20T18:46:06.621721Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e158d5d6f12aece890f4d4cb65394035","sha1":"8a93f57b5b426396984433dd47d00f548ccca2e2","sha256":"ea1383e95d98d6f88be95d987dfde5e216421896ebc030a273b213f34d8dae6c","sha512":"d61b63f8b795525c993d8a1bdc9946a6e2eefb94bdfcde3bef40584f1b0f38b2dbae737d3df68a071c1195ef2e36eb403b1b932107cc930d5254135986a8a0ec","ssdeep":"","tlshash":"5be02bc53946d81227f1c0d054dfd482b469e522959965018fa1d35c3433816d027a4f","size":384,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-06-13T10:53:58.739347Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"466ca915a157e0a50e150893aa8e21ca","sha1":"7685e8c7446c7ad6ccb520a5c1fcf9e2ae167d83","sha256":"29073d5003c7c46d8d1d103d4d5b954a9df230a972add1d1643ad566d23baa82","sha512":"233589086a50153c7ca07d3a56896088b92ccd44a99011e4b77368ce07983aeac6a3f0dbc2098045f7d51505b39c2639eb0231d4a2f291994e8b9f0f63ec7788","ssdeep":"","tlshash":"83f0844a2a7c893b33f81ac06ccfe1a2b44fdd631ba85314c6c0c82c20b220e803b70d","size":519,"data":"","first_seen":"2023-04-12T08:49:10Z","last_seen":"2026-03-20T18:46:06.625444Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"8683ff242c267df0f911f74a59d1a57f","sha1":"48a8dab4f2222808ee90697c89540319febf4739","sha256":"32d550bc10c9d069399341fae180e953b0bb6e20fe610331ac41f2db14bea3d8","sha512":"0445eeb3645d719fd7434f88977d238f0e82e957d37e3cd7c0975681806bf566a3f789d5cd106f03edd9611f49a102f3eeae952f11f5d4f139b7d272038ea723","ssdeep":"","tlshash":"a7e020d13a4ae426036555fae42ff041c4e5fe345789c4198a86c3ed1c33005d13be6c","size":352,"data":"","first_seen":"2026-03-20T18:46:06.627265Z","last_seen":"2026-03-20T18:46:06.627265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"7f68a4471dea1543639066aa2efc4168","sha1":"f2c4ca18daeaedf098b01fdd6d2e2b56234f8acd","sha256":"03127711a772a21f7e68381f9f86acd896920f812e3738e26e6cdc1ea568d7af","sha512":"e04dd6ae068845b805976bbccedc3dab2d41a937020c68922ddb8058cf67ee70881e26b3aea23ed3ac7e0069da5017d40003a0d77bdf2d90d2d91d59cc9dc658","ssdeep":"","tlshash":"c5f09e873a7eed1a17b513c078cff6929469dd7397cb9e16c585c91d1031006903eb1d","size":482,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-05-30T02:55:58.503056Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"db1a0f079f70edc9a212f895b1e99670","sha1":"c10421a8b123f5e289fe476d2aed2f79d1ea70c9","sha256":"dfb6046900b415319b1a91e31516d5393ec8a5eb425b48a183a70ff69dc07bbc","sha512":"89f0c2915b0070303c338c433e50272250f26c1018bc7bc75f620262b39737d35eeb4e09cc29225fede3dfbce38250d9c33ccde284ca5556a3ec875b25c6ee16","ssdeep":"","tlshash":"97f08b89ea1db212167c10f114dba9839c6cade3934d4960ca5fc41b0af2179ed3b61f","size":551,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-05-09T20:35:41.808297Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b6064f9febde12bce2b011c84415881b","sha1":"62fa3e1b1b1600c33396ee9b079ad19c3222ab03","sha256":"c57c92c9c6a406cb8e45b1cb6d4ada568d253fa53476976d4cc6fc41b29cc803","sha512":"0b5b33a633c7051ea1571a1d7e2fac9e81ae275d0b8675ad7641b76fac2febc2919e8a49bf63fe48aa45115b223dde1eede15ca623e59524482221082e776737","ssdeep":"","tlshash":"b5f059627a5dd221277810c018cfb5e2955cdf3353a576d4cb82c51c207282e913ea0d","size":482,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-05-09T20:35:41.822981Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e39ed717130f97a3735afc474f2e71ed","sha1":"57ae841abd222d77dc3346349129f1665bd27d85","sha256":"e9c3695266341d64cff768fcdffa79973802c65cc64c370cf8343a22a58085aa","sha512":"19d1207235bdfdd5df4237c9afd99652187dbce4f7ff2550feac112af0bd633f97e73d80169c51d89bfa0aa294b3cc233ef284f781b1e2f5d3b8d697948b11c6","ssdeep":"","tlshash":"9ff02b42161f91192ef550d02ccbf582b75ada32f78c8624da41c5dd803228fd13771e","size":519,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-03-21T00:09:00.431481Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"bc52534ea3e033eaa02b3788bec6de6b","sha1":"69a49f872e2962f9b2a58d26ac0b8e90496b0413","sha256":"0390eace9041e70314674fcb2ff946b81a2ae75742f6327633dd1bd74c916b55","sha512":"508ebc5a5afa211ddb89612f0a6ea7f3304121b5ded841f4ae9f085195f474554644d22ca747a594456507f402594868703be5958194bc6931f86d533885025b","ssdeep":"","tlshash":"a0e020c16d95e01f33f610e050cbc542987ce6b1db889546a68dd5fc59b3015c13fb0d","size":347,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-05-09T20:35:41.827486Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"26a357d39709783e04d8890734700622","sha1":"e2c3556e9f6af4457acaa967cbbacb33b6371665","sha256":"af10cd7e79254b961c2aa41a23d5ae856001bec62caaeec46d13f6f7022cacca","sha512":"24a0d5cd181c6093c3a81982a0c9c59ca553ab6e4b3f5dcadabf88c87fc3f6bd0bd7eb2b64a4456c327f837e74c4441cb2847d98239ad77446031b3166e44cc7","ssdeep":"","tlshash":"14019cc22f9a6063337700e044dba9d9f46cbba1a7c422b8d654c29c3432015c03b75e","size":727,"data":"","first_seen":"2023-04-12T08:49:09Z","last_seen":"2026-03-20T19:37:08.506554Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"9c1d19989f1f2ee5fdcd264ea5fc8da3","sha1":"1e058d19784e788d1e0a7bfb100dd0002c9fe9eb","sha256":"9ab2e8eb905c8e05eb6fe343f746de3dc9a462d64c9ab302db44514126a6c94d","sha512":"18b02b6b6cec7c660993088d3e25429bcd361e0dd750187f57d6e426971bb3c1e79cf1bcde7b270e31d9c8c3eaed6decc556438a821102c427bca52b938fdfea","ssdeep":"","tlshash":"7bd0eb963998b056137a10c0b8dfd4c2a8cad872a2cce861c9c6c4282836004e23eb8c","size":280,"data":"","first_seen":"2023-04-12T08:49:10Z","last_seen":"2026-03-20T18:46:06.6373Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"501a46ac40672d4d6af14ffd23887a30","sha1":"af97bf581f9b721fbcf7309b9bdd15c151428ea3","sha256":"9cb72788bdbf32785a5e3a0962314460a740da3785edbae36719a2f364e46976","sha512":"3f728b174d799fa4e639bd91023f74ad03382dcea88db5bc985e8f90108b12d3aa9f087781a7d38f59759dfec137698900b329683e6ee76007f3222addfe5f67","ssdeep":"","tlshash":"3bf08145175a92161ef520f418cfe8c33accea31a65c866584c6c58d48b26dec67b70d","size":541,"data":"","first_seen":"2023-04-12T08:49:09Z","last_seen":"2026-03-21T00:09:00.443989Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"c4781deae97debf06e391c7a562da1b0","sha1":"a4bf3267262c78e73b9323b38484a13c74f6bf66","sha256":"0b6b97a940dfc9bda3c1ad013961d66f2e16c8d16887cb9a7f4076f70b2cbb78","sha512":"ce7ec424d98904e717b95123c5c7a9831916fa509b3fb4835a7621bf4f4a6f218495307664e579f5183f0c3ddac9bd9872a713ba502df2597c07ef38481eac9e","ssdeep":"","tlshash":"34e0c0123768672533b902c058cfc8d16c68c7be53ac86b1dacdc42d1071011c83fb1c","size":337,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-03-20T18:46:06.639768Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"47de78daec0d22d7b6067bbcc39fe37c","sha1":"a6e5896881812e77edfbcc05aa23c607f258745a","sha256":"3cb0c2af229fde31a27e960a9ec9e264826006568d3d47e18aa9589ed6db88fd","sha512":"c70ad896171063bbc356d526b373dbce7aaa761039c0cd2de5ad2d9664dee95385bbe2b9389fe7cd529f3f6be4cd4917371c348d4f48c3a25524be538d55f9e5","ssdeep":"","tlshash":"e5e07d4a7969561e23b912d0548fa4826868da73a78e8e55c585c81d1537011d03eb1d","size":296,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-05-09T20:35:41.814184Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"8b7f128a4bc3fdb8761db5f3e4b11b61","sha1":"010bd9530575d18893f14e9687706fd3eb2097ad","sha256":"39fb8fbc8b7c40f196e225222fc090f45bcf205599b1417dab6ca25b51dd4b6d","sha512":"8b161f15b540615baca47d0c963a06b04b9b0b4c18ad3e8835821969f751a50ea421617573080ff2f9225991bd6f45d25f86475e6d83849580b4306bd5d33a0c","ssdeep":"","tlshash":"89f00e862b5882031fb030f818dfd8c368ccea32979999bc85c1c54c0837645d2bbb8d","size":495,"data":"","first_seen":"2026-03-20T18:46:06.642281Z","last_seen":"2026-03-20T18:46:06.642281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"2cfc16192a3964247ed3a28183c2f4c1","sha1":"ded7960c0f4fcf659680624f2477cab78658510b","sha256":"70db4d9e5570fced804c6a1ef0e25dad342aabee74be269591ad2fcb317a1304","sha512":"2df6344b64a8d7f75f1667063b6129097d018f64e70e0f55ae7fbff3679c60dc271a5b4d6c51ad7240bca6fd0e22f76c770c519fe1f3ed4a37220bcd743dd0f3","ssdeep":"","tlshash":"6ff0a25a7f966037133821d018cfb596f46dbf65a3c081a8e7ead27c3175049503f64d","size":596,"data":"","first_seen":"2023-04-12T08:49:10Z","last_seen":"2026-03-20T18:46:06.643738Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"35717f622d4639525f437a00c6deb5cc","sha1":"ec38ce554f316d469ace42d26d0d61d748065961","sha256":"3d6368ffc1bb68b4359626af2830a3971e5fede911019552f31ecc72edfadf5f","sha512":"4d3d1db64e3838f921fdf0710b1643c8f0746c436026ca7ee36b214ade17559b0a655f7e0a7365f8784cac42ca731489a96710344df14617552116961911eeb7","ssdeep":"","tlshash":"f7e072c33a8e90560b6120e4d44fdc42d96fbe70a98cc9069ac0c1b03cf3008ea3eb5c","size":304,"data":"","first_seen":"2023-04-12T08:49:09Z","last_seen":"2026-05-09T20:35:41.824759Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b020c5e7ab5ab93824c411e293736397","sha1":"4488bc41054eb0ff387e50babbdcbbe5e27707b2","sha256":"e06657121703fbee9f36bb4184f0c440e9a85f65675c96351f55f682e70aefc9","sha512":"92abebeccc5727d2b3a4bbbb6470de3cbfaefb6fdc2ecd95be2642f91e693aaeb1e72ffe2654441037e3627cb18eeb57f02e64a41dec3d9c1d142e09c5f86c82","ssdeep":"","tlshash":"49f09e873a3d991617b413c068dfe6939468dd73938b8e11c581cd2d0035005903ab2d","size":473,"data":"","first_seen":"2023-04-12T08:49:08Z","last_seen":"2026-05-29T18:55:42.63196Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/js/etherwallet-static.min.js","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a017c51afbdf54526787586a884b5e5","sha1":"8022457a957f9f0d5ae6216a63c5581f42bc9514","sha256":"26a6ff34ce41f9fed07af3ca773a4a817aa8679fbe39a2e166d69263a99efbc9","sha512":"68e420b6cd3cf6cdfc877f42044c0ee259d155de56e6e77ab3a2e596f67b7771ba36b1f7522cabaa35ff031874bb8d5d9aa613ed20eb8ba1bb6f0f065c8dd66e","ssdeep":"768:tDETLLpf65iwbQODcCdXA+5BOcPRPE62xy3:tvJAmpE62xy3","tlshash":"45c2d8a8f36412b642df48d6282f515ba57060266c0681acbeb9c8e7dcf8fd16477f34","size":26698,"data":"","first_seen":"2023-03-13T05:23:51Z","last_seen":"2026-05-09T20:35:41.783867Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-06-13T16:33:42.461919Z","times_seen":335134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"node.0x0.su/","fqdn":"node.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"node.0x0.su","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 04:24:07 GMT","end":"Fri, 01 May 2026 04:24:06 GMT"},"fingerprint":{"sha1":"03:B7:1D:CF:A4:FB:A1:6F:2B:10:DF:65:FA:BB:C1:B8:F5:94:C0:6C","sha256":"37:43:B0:39:BB:2F:8E:8E:8E:01:84:2A:C9:5F:4E:DF:A7:10:71:4D:1D:7F:EA:6C:1A:4D:D6:89:26:F6:35:BC"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: node.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://wallet.0x0.su/\r\nOrigin: https://wallet.0x0.su\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-length: 23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":140,"dns":61,"connect":30,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node.0x0.su/","fqdn":"node.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"node.0x0.su","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 04:24:07 GMT","end":"Fri, 01 May 2026 04:24:06 GMT"},"fingerprint":{"sha1":"03:B7:1D:CF:A4:FB:A1:6F:2B:10:DF:65:FA:BB:C1:B8:F5:94:C0:6C","sha256":"37:43:B0:39:BB:2F:8E:8E:8E:01:84:2A:C9:5F:4E:DF:A7:10:71:4D:1D:7F:EA:6C:1A:4D:D6:89:26:F6:35:BC"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: node.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://wallet.0x0.su/\r\nOrigin: https://wallet.0x0.su\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-length: 23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":136,"dns":56,"connect":32,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/icon-eye-closed.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/icon-eye-closed.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/css/etherwallet-master.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1491\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\netag: \"sobdxy15f\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7300681911effda85b52a413d39d43b7","sha1":"3c698c39265d0a9271693936e09cfd3d1d1dff66","sha256":"9f3a4acd65f0c3526b29451bd408bf6d494cc93e6f722b6346eb5270cca41754","sha512":"028c0091b99626972d896590ec73ebb0698d072002405f2b95d66b7fb1a7d8f39b2217d7ea9a08bdee5c15190d33267d473d483fd91e74960ed38882ffb32636","ssdeep":"","tlshash":"ad3165c4ab74417886d59f2f9f3789f83dc5d07f2d215b6dc1390f4e2689cd68484856","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.796376Z","times_seen":96,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-20T18:45:32.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\netag: \"sobi4s3fzn\"\r\nlast-modified: Wed, 11 Dec 2024 07:00:28 GMT\r\nserver: Caddy\r\ncontent-length: 160691\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":160691,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (820)","md5":"cc2720b1d859c9afb372d8ceb4ee39b7","sha1":"7bce65b45c000bbc3a01ea7726b607299463ea66","sha256":"fe84771598f393156657f4f04e84d65e7b43047003ae2cf0f196003e5740f9d6","sha512":"a1a7f72195586080af4f23c0d4f1a82f6e1446553cd1e276e6d0af8a15d9e66055026ed9fd0dcb36c92efc570b3c7f10b2f871db54ee1c62c20c369c35c124ee","ssdeep":"1536:jsjPfhy3+SNC6XbuKlJhO/WjfgFiN+SGLyqY+iGk:jsLo3jN3Xbu8JhO/YIgNj4y+iH","tlshash":"43f3e620b0f06f73024644e1abe24b5f3ed6c48bc55a1a21b3fc4ae55ff6c52d92b259","first_seen":"2026-03-20T18:46:06.533223Z","last_seen":"2026-03-21T00:09:00.371709Z","times_seen":3,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":133,"dns":54,"connect":34,"send":0,"wait":34,"receive":104,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/js/etherwallet-static.min.js","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /js/etherwallet-static.min.js HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26698\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\netag: \"sobdxyklm\"\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":26698,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26698), with no line terminators","md5":"7a017c51afbdf54526787586a884b5e5","sha1":"8022457a957f9f0d5ae6216a63c5581f42bc9514","sha256":"26a6ff34ce41f9fed07af3ca773a4a817aa8679fbe39a2e166d69263a99efbc9","sha512":"68e420b6cd3cf6cdfc877f42044c0ee259d155de56e6e77ab3a2e596f67b7771ba36b1f7522cabaa35ff031874bb8d5d9aa613ed20eb8ba1bb6f0f065c8dd66e","ssdeep":"768:tDETLLpf65iwbQODcCdXA+5BOcPRPE62xy3:tvJAmpE62xy3","tlshash":"45c2d8a8f36412b642df48d6282f515ba57060266c0681acbeb9c8e7dcf8fd16477f34","first_seen":"2023-03-13T05:23:51Z","last_seen":"2026-05-09T20:35:41.783867Z","times_seen":113,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/icon-help.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/icon-help.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxytb\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1055\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3213b322c0ea23345d78b6e07087110c","sha1":"dcd1af49a004dfe4bb8bffa16d9ebefff77139c9","sha256":"383d35008f3b28d2d66f3199d4b99072fde420f0efc44c81d6ac839b73e5b9d0","sha512":"35dfb737456b19aa409012708157a9c070a8801c1e1d5ebed6ee759de04d5ac9b3078714626ad5379441f5302e5ae1e9222c5eb6849eb0d5cd92ee5b606be546","ssdeep":"","tlshash":"351175e29f2850ecc0c74faedf262144500d683cb7a70aa543ed1d0c15c39dee129535","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.776561Z","times_seen":101,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/fonts/Lato-Bold.woff","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:33.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /fonts/Lato-Bold.woff HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/css/etherwallet-master.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 309728\r\ndate: Fri, 20 Mar 2026 18:45:33 GMT\r\nserver: Caddy\r\netag: \"sobdxy6mzk\"\r\ncontent-type: font/woff\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":309728,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 309728, version 1.0","md5":"d878b6c29b10beca227e9eef4246111b","sha1":"c7a289db10249be0c5fbdd1c2197c1c6b6caee6e","sha256":"0e56b17d142eb366c8007031d14e34da48c70b4a9d9a0ca492e696a7bae45e1e","sha512":"5a9aee4cbec1c111ecf00f984ab901bc72bfd20e0da5a3f5437c0457a05b5eac5020517d026d1ec44b8bef7d8af18e42362c70378bea88c993ae7af36ff3434f","ssdeep":"6144:/se8qKROQA7ueQddddv4A7+TZTxlC9P4VhE21B4H2q2Z8XyH7wPYIasUMiB:Ee8qKROQA7unddddhsdlCpD2rqs8XyHp","tlshash":"2b64126fe5631c08ce59ab654babb20d9cb97a181f473225b836a3300dd56fdb40af44","first_seen":"2023-05-04T15:30:52Z","last_seen":"2026-06-13T00:29:12.38189Z","times_seen":368,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/fav/apple-touch-icon.png","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:33.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/fav/apple-touch-icon.png HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy316\"\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3930\r\ndate: Fri, 20 Mar 2026 18:45:33 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":3930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"8f3ba2fa244d81f7cf0f31d12941592e","sha1":"7daaa678147602ed24cb2c92e600f35663d9007e","sha256":"3b5080f1686d314f2da2473c0383f9239b10e5853066edb93ecdff84d9d5f86d","sha512":"5e3ed8cdc37b0b84de4514b4e4deacaa486a866a1c123de96d522a972b316c136d62918bd1333a8c27bbf0727774eb4fd8abb16db4bf6bf6deb83c93cd73c28f","ssdeep":"","tlshash":"ca815c32c3ba54af20c70e45e3150274862f2a25b4c177f121564c76655e45987a6cef","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.788257Z","times_seen":74,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node.0x0.su/","fqdn":"node.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"node.0x0.su","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 04:24:07 GMT","end":"Fri, 01 May 2026 04:24:06 GMT"},"fingerprint":{"sha1":"03:B7:1D:CF:A4:FB:A1:6F:2B:10:DF:65:FA:BB:C1:B8:F5:94:C0:6C","sha256":"37:43:B0:39:BB:2F:8E:8E:8E:01:84:2A:C9:5F:4E:DF:A7:10:71:4D:1D:7F:EA:6C:1A:4D:D6:89:26:F6:35:BC"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: node.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 84\r\nOrigin: https://wallet.0x0.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"method\":\"eth_blockNumber\",\"id\":\"bd2735b9dd2fba5f61cdfce7c5994a22\",\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\nvary: Origin\r\ncontent-length: 97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ba3ef184b2c5c63a8a1c6fd1c511a4b9","sha1":"7d42cfd2fba924de92c4fd2828d54c2f6e076d54","sha256":"1afead3d092a8af3c5e17475c5e3d3fc5b2fc6572ddd82a45227a10c4f28db68","sha512":"99fc6e52abd89f025584ff1db248d5b81d233e1d00606e44b63e15ad9defac8eb77a5ac61f4d3728e252f996a19b881569e04abfdc0080682c7b8ca7c9cd821d","ssdeep":"","tlshash":"9aa022e0230c0bf3002eac83800002a022eabbc8800cce28cccf0fa003028038308b28","first_seen":"2026-03-20T18:46:06.549311Z","last_seen":"2026-03-20T18:46:06.549311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/css/etherwallet-master.min.css","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /css/etherwallet-master.min.css HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 109425\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\netag: \"sobdxy2cfl\"\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":109425,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63224)","md5":"7b9f99c546ca3da47d2fbd988fada357","sha1":"d8c2cb84b7e488225cc236e7476139797fc2d1e6","sha256":"7b6580b4fb83b66f5ead4014b0f138d319bcf42450e0b366fe690242ba3c4e71","sha512":"09d80c8200b6571c7b5ee538efb714658abea750b876c8acebaf1d7883138d85af721d90d3a2f3a413d53de812fd51b6a42d3f690d5e3994d857fed22d30e0e8","ssdeep":"768:f0Mev/TD+Y5UDHrDHNJoTNKVThPhhecVThPhhevmtvIF5HoFL3n9fMqnx7OnS9:YdIfwcJAmKHCh","tlshash":"dbb3f962aa50346e7427cb2970c0adc71a255052f5278ffaf5275da0cb8769f0723f4b","first_seen":"2026-03-20T18:46:06.551612Z","last_seen":"2026-03-21T00:09:00.390469Z","times_seen":3,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-myetherwallet.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-myetherwallet.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy4xp\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6397\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":6397,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0890f376c28297e91d51ad0b5b53d9f","sha1":"993aaf5ba2065e736f1ea2894e4f7690f94aeb91","sha256":"fbdf018eb65935a807fff8250797d6fae53a59bdf701b2c7280964eeb574be7d","sha512":"544a7cd43a3a1fb33d144e52ca117d816c3f809ae40b1c4234e2d751fbcd7b8f7957edb45d7fafdcdebc26ae71762a4ea768034afbb16cf54afee353d527dc2b","ssdeep":"96:+3UejRjSH+jA5+UkYVlRxOwW4Ho1EHtqZExHeNu8PMxTtB7OdOXYi2td8lRi:eJSHWA5+U7RxOwW4ZHt/mST/6AQtwRi","tlshash":"fdd113f9aaac25bc75178750cf3756602b5fa4b9b70ac2f0089ee371b41bed4c58b810","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.796951Z","times_seen":69,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-ledger.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-ledger.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy2gr\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3195\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":3195,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"983f4b1043cc1d3657e17ab5970184db","sha1":"7df3d95bb50cecfc0dc6c88e33ec6ca7eb6bd3ae","sha256":"9940d02c5f371032fdc9663e416c3cf3da512dc02c5a05f515b53d90ded09f9d","sha512":"20ee6535f47e790f7748e7b0ee93f542c58c86c63e58ede25a34de9bbf5d15b81fed9b6cfd51452db3de762656b1ea090a692e6e0b714ba8bea6f24c78b7f639","ssdeep":"","tlshash":"b061fc24d3a967b8aca4c3b55729b8b4f48b45ef9091f31c96d2c4a4f3154cc42fc8e4","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.763283Z","times_seen":82,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/js/etherwallet-master.js","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /js/etherwallet-master.js HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5355634\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\netag: \"sobgmi36sfm\"\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Dec 2024 06:27:54 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":5355634,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6459)","md5":"2e6ac4e7ee116dfbfc8e8135a3f8c4d5","sha1":"b2c6f54047ea0c8697140ad7072dc46597ec5f89","sha256":"6bc3582953b658fbc2f3e65703aa0dfb6ba82ca13c8d8d716a8440abaec0fb40","sha512":"c85bd7ec03f99910df49d8849d79665f817cb05aded70a191e81506086a6eb96e0957f551a200ed83a706bbc586b5c0cf7a80ed42d0cefc360006d3a1898a787","ssdeep":"12288:WQ/HrjePv6CDMB6L6Z9tei2jqxMltvB0sarLoZagJM:9/PeX6CDMi6Z9tv2jqxM1RJagJM","tlshash":"6235099d25512fbf40422a7441cf2a59f360b127a1dcdc8039ac8fb56fec429857ab6f","first_seen":"2026-03-20T18:46:06.557231Z","last_seen":"2026-03-20T18:46:06.557231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-trezor.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-trezor.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 1882\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\netag: \"sobdxy1ga\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1882,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"213e18c0a13d8fcbe88566c8b7a6592d","sha1":"361605aef176c03cdfb093b205a27b6801933284","sha256":"36cc572f3b6a4963cf61e2504d4d8b3e2ce394cd57558656d37f39f0f6ad6cff","sha512":"002233c780bab4f6d15ece9fd0136165854b833e7c84ee6eeb3b3da31cb9bfbd4ee0c966b6abbcbc72d91e5191ea72d3f7de01c93ffc76bbe98940962528c1b1","ssdeep":"","tlshash":"3c41735c537853fc8c5e83abe365897c319730dd129d0a38db5d52d134a09bb4588d1f","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.803314Z","times_seen":82,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-coinbase.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-coinbase.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 2810\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\netag: \"sobdxy262\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":2810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51436bc20e229ea411fc9b651022c746","sha1":"1a6393c80ff58df5764d5591195edd6ec8877f9e","sha256":"b63ead79e500556e60fcfccde8ef1a45d69090741c3728182fcfc40ce11d6af8","sha512":"6e483a15295f7ef1a7e35625dda00410f74b0bc757549ac7b9b0d62dc2c11a581ea7a348c168111e04cb965c9f4236dd213b9ad6fce675954b37285bab705f45","ssdeep":"","tlshash":"435144deeb7411b87dcc6fbaa7545879740e347c39314e188079fe69158389cbc644b2","first_seen":"2023-05-23T03:30:07Z","last_seen":"2026-05-09T20:35:41.790302Z","times_seen":19,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/icon-remove.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/icon-remove.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"sobdxydg\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 484\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":484,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c16eb91370331db3c034a8b57e1f2ee0","sha1":"f5becd32229fa162ddad7fcf568f0abbaf601851","sha256":"6cb52e49c11965693c0489cc5f5575176b05d4278ffa34bd0bbd86d34c27504b","sha512":"3ca39fa0ed6be5b31ea7241fdd0f5fce940f81541705e2a825a4ece8ead1ee46cb5e48f7e99b43765a99e710106d15d40e78cfc7faa5b4466cb0b61cb7b0b270","ssdeep":"","tlshash":"16f059fcd308e2e817d51bdb4b35511e835bc079704802a893859f12a2834a55c99cd5","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.785617Z","times_seen":101,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-ethereum-1.png","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-ethereum-1.png HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy3hl\"\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4521\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":4521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 250, 8-bit colormap, non-interlaced","md5":"287136090d78afe8fd0288287964ec57","sha1":"f365b70833d7daad7ffa57efceeb46ab57be08a1","sha256":"1623611fdd0d701ab8caec3e4be2617986b344538b5b16fd8631a6793c5fc3da","sha512":"e20cc3797b10a713b3bb3b22bbcadf449f2633b443c810ab33daf4f7603c42bdb5994854b6c0f99dfaaa28ee9b7fe6438a5c81b275e2732f29f1c6530a508940","ssdeep":"96:hMxhVrL9858e+Rhr0PlE5N6NtSEN/py+VER4Czfja:hMxOSRhr0P2n6CENdafja","tlshash":"fc916da754bb3bf42215e4ddba9ee25cbff11b5e3b994715d6423006633cd089828019","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.755882Z","times_seen":96,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/fonts/Lato-Regular.woff","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:33.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /fonts/Lato-Regular.woff HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/css/etherwallet-master.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 309192\r\ndate: Fri, 20 Mar 2026 18:45:33 GMT\r\nserver: Caddy\r\netag: \"sobdxy6mko\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":309192,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 309192, version 1.0","md5":"27bd77b9162d388cb8d4c4217c7c5e2a","sha1":"331448c1f46d14dd6f1dc84b13cae72f8078384b","sha256":"5b9025dda4d7688e3311b0c17eddc501133b807def33effaef6593843cf5416e","sha512":"96833744700717210b511623d949d6575e6a3e87136493e39e734685137bae42708227f87b22973b49222ac6c2856e410e5d0d13d113db9c181d6f5305cc3d92","ssdeep":"6144:UROvJZd6RGcHFxAEVMfc1JfKaA2V4QG9RKAx2CT2Z94j7DgoigY0ME7M:ukZ0xfAEifAJCILGPJs7ZQ7soimM","tlshash":"4664122fced481d5da5f0572bafbeb4b500b94e09012a3cc61dd3ff8a2c140e28962d9","first_seen":"2023-05-04T15:30:52Z","last_seen":"2026-06-13T07:23:57.994329Z","times_seen":548,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/fav/favicon-16x16.png","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:33.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/fav/favicon-16x16.png HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 482\r\ndate: Fri, 20 Mar 2026 18:45:33 GMT\r\nserver: Caddy\r\netag: \"sobdxyde\"\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"6e70a182c5a5e64d5ec8a47fde70911d","sha1":"b7b6e45a62fb87eed7310aca5f9a241a27f3d955","sha256":"bdad1851dbad3b146e96bd299c0e1ea8794bc4f89b251d44c1728b85a67d50a8","sha512":"4c2befb4442bf5c9666dff157ef7468136d4832085903e8283fc5bf2471472d432e997ed97835d87272888150223d8038f1db26fe15a5223b750ce7987120ef5","ssdeep":"","tlshash":"42f0d4f71b52d8174847013c48a91b08ca715d14c6e70f779544b41c26f3c5575d41d3","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.761621Z","times_seen":74,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-bity-white.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-bity-white.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\netag: \"sobdxy1gm\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1894\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04548c46e37ee851f790e7407135593a","sha1":"6e74c72098bc6ded78c06a561333556795c2936a","sha256":"bc421e8eefb8b25090acfdc8764aed3e02ddea0b6fdebf78f8318b9a605ee7ec","sha512":"1b2c1eb37c216ab4f652a4058c66b0be172ac71f56997101c8fa45f57fd6e63e40768d450d3ab0bedd9198f7be5adb9d8871f3822df658c6488956597125c0e0","ssdeep":"","tlshash":"c141cef2765e3e3c541303895f2b8b62271e68dd766543fcb65f4730a80fa98e823994","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.800539Z","times_seen":102,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/icon-x.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/icon-x.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 538\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\netag: \"sobdxyey\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfee2fcc67a86cf25dad4a452116c5eb","sha1":"45ad6b3e335bf1a52d410b54bc301e8098b3693f","sha256":"8b89ce05c844aa929a595261f9be41f16c193e567f7125f5f5e6af1b6316bb32","sha512":"525ab63285b8bb1c07cdeea272b91b145bfb0a780660b57469a6d6a0550b2a49008b8a904d02e90d6e24c41aff6be67ccf111694c49b89ea0a1d661201195b4b","ssdeep":"","tlshash":"d2f024bf4f357ce866f8c755b7171973e60862b90310c0005848b6e803249ea2790a04","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.799569Z","times_seen":103,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/icon-external-link.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/icon-external-link.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 1486\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\netag: \"sobdxy15a\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1486,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5925d4dabed76b9a975d0fa09fb33c67","sha1":"17ee61a89985eecffcde108295a77851913e14c6","sha256":"f5d7d6d27a38ad0894bbe29647448910dbfb315b3d0ebf114516bb343c365108","sha512":"d76d67f03e5b5798b165ef707b57a472adcbaece25915ad16c2b8a039daaaedb88c0873e6f630643894243827fa422a842d1acd50e3284e03ab79b7fcc76a38d","ssdeep":"","tlshash":"793125daefb4b6fceb861ee6ef2001e835dd706575f57118d59b83705a42cc810408d4","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.756692Z","times_seen":86,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/notes-bg.png","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/notes-bg.png HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy32\"\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 135, 1-bit colormap, non-interlaced","md5":"86ee27473b0383960ceaacd9654064fe","sha1":"a180670430d615099ad2df90359d63ba23a5e8ca","sha256":"99a8dc31626e3b8220c998ef37a2b32f993bb9f55bfd81bb1e56775fac5d86bc","sha512":"7e71fd925e666587e44cc53183947ad110571ca0b1b37a1483e13aae54096bcad536ca5b6c7aade0e98be789dc6e0fdf008cbdd590db0fb79cd98c0a4002776a","ssdeep":"","tlshash":"eeb092f172644c3495498dba85304392c62501a6a014224a57477026aa2034a81bdac9","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.80504Z","times_seen":113,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/icon-help-2.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/icon-help-2.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/css/etherwallet-master.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1055\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\netag: \"sobdxytb\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e26074acd8592e59f2338530f4952299","sha1":"813add1ccd43236d12b846cc720462d04a423187","sha256":"dbfc0501ab2720220ef11f0fdaf84c1abea0ff97ac8e30d9e105e65036f41aa9","sha512":"0280c6e8be11809743728ced717f063af9cea6372cb342a01b3e75e47f1dc79805b1783343eed965b22d082695f71eb17c1ab235e5a0cf63b62e50b2aa976091","ssdeep":"","tlshash":"cd1175e29f2890ecc0c74faedf262144500d683cb7a70aa543ed1e1c15c35eae119535","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.802424Z","times_seen":93,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-ethereum-2.png","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-ethereum-2.png HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 2256\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\netag: \"sobdxy1qo\"\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":2256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 35, 8-bit colormap, non-interlaced","md5":"d94df79600f579ea3f3301eb40cb3105","sha1":"a6e5253e98df0a281e4f8d4a640d42c0237a518f","sha256":"bb0759a296ae9e0096c7af7ed1e730f2bb12e5ff9ca94749e3f395220095307e","sha512":"82466372ea140c4ef7e594f5f56f902393c4f2523f36af2a0cf1f14f58a42c4864d89e35c138f5dd78de69ceb254208a7c3ccd7f5c316fa0b178d00c140a9513","ssdeep":"","tlshash":"694119722c85809d3f5ad77401d78a0cda0ad958620187ae274ea1b0677e694ecdc12d","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.801457Z","times_seen":97,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/fonts/Lato-Light.woff","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:33.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /fonts/Lato-Light.woff HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/css/etherwallet-master.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy6nvo\"\r\ncontent-type: font/woff\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 310884\r\ndate: Fri, 20 Mar 2026 18:45:33 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":310884,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 310884, version 1.0","md5":"90301aa07d780a09812229d6375c3b28","sha1":"9a552e25e584d4462f4d5591ec6b4f7f51c41810","sha256":"e74cf550f9ba8f374e026115e0f4298c242e0d79d214f4e27ba765251139bdb8","sha512":"7da597c505bfbb85660b26fe48069dbe58f4db86c42058a8ded90d6f37c9637c0ee65138e6fbd9dffe92ff637b6e010d97495d324d9d248f69693d525b0def16","ssdeep":"6144:JOEwRXRfqrrrrrrrrrrrr4WMOp7v5ExgHqNqbIc4QoApWnhAznfVNg1MU/4KvJZO:gR0rrrrrrrrrrrrtMOptEaHqC2ApRVHh","tlshash":"e264127909e1c7f5a41bb6ff1c6cc200a099d72a9ce2dc693d3afcf86287d835494946","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-06-13T00:29:12.31576Z","times_seen":219,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node.0x0.su/","fqdn":"node.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:34.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"node.0x0.su","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 04:24:07 GMT","end":"Fri, 01 May 2026 04:24:06 GMT"},"fingerprint":{"sha1":"03:B7:1D:CF:A4:FB:A1:6F:2B:10:DF:65:FA:BB:C1:B8:F5:94:C0:6C","sha256":"37:43:B0:39:BB:2F:8E:8E:8E:01:84:2A:C9:5F:4E:DF:A7:10:71:4D:1D:7F:EA:6C:1A:4D:D6:89:26:F6:35:BC"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: node.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 84\r\nOrigin: https://wallet.0x0.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"method\":\"eth_blockNumber\",\"id\":\"427b241c74b3d4751e2af315c8f87d33\",\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 20 Mar 2026 18:45:34 GMT\r\nserver: Caddy\r\nvary: Origin\r\ncontent-length: 99\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"864b3ae5325af56cd082c2be47f5a49b","sha1":"7d64352b862dcb9433017055d87c35bf1fd561bc","sha256":"7b6dbc75aa55c8ab1cd2c57d80204272b578bac9a8f1e94a0e516776bf1070aa","sha512":"6355559337e0266529eb58795d21b6ad38d8315503838ecdd2560f808734352ed61ef759eee6784c1ec84155ccf30f6fa3c5ffeb08d64efff5aa63dc1443026e","ssdeep":"","tlshash":"96a01248130d36a1c0180d02d00000501109b784a6451809449f064021254159f08d20","first_seen":"2026-03-20T18:46:06.582688Z","last_seen":"2026-03-20T18:46:06.582688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/logo-bity.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/logo-bity.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1903\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\nserver: Caddy\r\netag: \"sobdxy1gv\"\r\ncontent-type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19948366477e5301fc2423bc0d70c9b5","sha1":"4e33cda756b7055b6ff45e49ea072b9bcf433b11","sha256":"2a2242cf8fc2d4e44944d0c2eace1c735934e6aa7158d5cbf93f6ff58d6ca0e7","sha512":"5190b421c14452a4de7ed9f034d60e70bcaf0e10aef1473ee2935f0a1593ea0bda2799c7761193bb547b4963db60a0e68e63bbf47b03f42ab6c651a3fa54f741","ssdeep":"","tlshash":"dc41bcf27a5e3e3c541303885f3b8b62374e68d9766543f8a65f4730680fb98e823994","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.765017Z","times_seen":96,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/icon-check-green.svg","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/icon-check-green.svg HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy9v\"\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 355\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c45819388361940d01a452d1b9ef6950","sha1":"2c1870e983a702660190cc97fbc5ff94888f8845","sha256":"7bd26bb686b4292aa141c18f95d98b9563f45e9972bdf2acc3e4a4ed249e60ca","sha512":"9dca5532958b724cbd201fcaffa744537f43eaed0630a1e96a42b665d142b4e7bb4ead7573be3a966e5ab4add24c316271360cf9a70beec30fbc42c9af61afba","ssdeep":"","tlshash":"71e0d8dcc12bb69d6b9d7be2d2694284335aac150d354650d0dd1c8300e576b1888557","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.753079Z","times_seen":97,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.0x0.su/images/print-sidebar.png","fqdn":"wallet.0x0.su","domain":"0x0.su","tld":"su"},"ip":{"addr":"185.187.90.141","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.0x0.su/","date":"2026-03-20T18:45:32.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet.0x0.su","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 22:24:07 GMT","end":"Mon, 04 May 2026 22:24:06 GMT"},"fingerprint":{"sha1":"4A:DD:04:53:E4:4A:A7:AC:6C:07:3F:B4:21:DB:EF:24:2C:83:18:87","sha256":"2D:3B:C9:11:AF:F9:EF:3C:AD:25:F4:08:61:D7:36:C1:CE:7E:5B:13:4A:1C:FB:DD:A6:38:69:9E:E2:11:93:13"}}},"request":{"raw":"GET /images/print-sidebar.png HTTP/1.1\r\nHost: wallet.0x0.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.0x0.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\netag: \"sobdxy3ey\"\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Dec 2024 05:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4426\r\ndate: Fri, 20 Mar 2026 18:45:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":4426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 278, 8-bit colormap, non-interlaced","md5":"0e2e827ac5eaf470b7b4d73048fd94ed","sha1":"716861bae5bb885cd473e47840730679b295e97f","sha256":"6ab563f04beb06f96804ecc9389195c1a7c8b28f4d8758fff3e095e3c7198196","sha512":"30a4d5b2509953fc1cb342c524e1285341d5a6f922489fad73c11b298e5122bf498107741668827f46d80de3f639ea00d284b8a65275861ebe47d31e7eec018b","ssdeep":"96:ynNoY0Mr77NFe0Ipa3nKNY/iOn5BGwJNcOt4t2R8PT7CUMD:ynCY0MP7t3nMwjxJCRFSFD","tlshash":"8d917c3b2c4853aca9a31a5913031665cda2c06d73778475e14eb2348ce6262cbfed79","first_seen":"2023-05-11T13:25:06Z","last_seen":"2026-05-09T20:35:41.772877Z","times_seen":93,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"wallet.0x0.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"wallet.0x0.su","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}