{"report_id":"c31ce39f-b779-41aa-8964-4a28b86266af","version":6,"status":"done","tags":[],"date":"2026-03-05T06:42:54Z","url":{"schema":"http","addr":"www.xmrwallet.me","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"www.xmrwallet.me/","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"title":"Best Monero Wallet (XMR) - Send \u0026 Receive Monero Securely","dom":{"size":28819,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (795)","md5":"f6d90f29561cabad54b3497a1af04b1b","sha1":"107b6ee209f987dc0663d0579c304f63b875cb3b","sha256":"90d45bf21427d7e944f13d8b1b666e6460f24ae62000f3dce5ef781f37472b6b","sha512":"b7fb8996fabdd7c952a9bea5a0e64183ef1848f3a87d9e6783fbfe7f28c3f8e59cc39d25e63cc9d6e5b987fe46d4d1da8b4fa5ab00aaac56d1981df2de6ccba7","ssdeep":"768:3u6X6g/xdxOVFoOiTxa11T+tdY0qn83sYRkmAL6wmk7riP:+6Kg/xdxLBRz","tlshash":"3ed2956282d92f37014263e270217bfeb5ab4a21cd26d471f3bfa2157ba4c947d271c6","dom_hash":"domhash912cc679e86a9ff3a50edda338ade3bc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.xmrwallet.me","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T06:42:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.xmrwallet.me","ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-05T05:08:20.705097Z","last_seen":"2026-03-05T05:08:20.705097Z","alert_count":28,"request_count":28,"received_data":2179748,"sent_data":15586,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.xmrwallet.me/","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"76a5f62f269a508bfb1edb248e601ff3","sha1":"6cebb859572629aa9e2808d34fe24cced2d1bc90","sha256":"56c014f2cc365d8ce0b5dcf725c6cc2da6691527f22c36441a04470ad11caf51","sha512":"75caab5bf60ff3f88a07b3498363970a91a8abcb66ae33b889f6b56fe7815f19432e570cdd04a3d925554af47ebc7bf87bd5f592899155ae0cef1d3921bb8284","ssdeep":"","tlshash":"23f086eb45f483405ee600c38ea33102393b60ef198c88911702bb143c0a33faa2eb85","size":587,"data":"","first_seen":"2025-05-26T06:04:46.730755Z","last_seen":"2026-03-10T21:29:00.068599Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b62f6cab7993c1daca83127bc89803e7","sha1":"6e242dbd9a05d565f85da6b1a8422fc1e58b893a","sha256":"6f68706261f62d2444d4c43517e2d80a015a52a29a55fd91d5e37f458670fef4","sha512":"b39b0a2c5b723bb8ceaca9aee386d9f5e3cbb36f95b4374d61b53f17d58d1d99dc96f437cfe5102f67f92eccb5e3f812563cb964b59b1e49e25a862ee7520f01","ssdeep":"","tlshash":"edf0279872286c7d420722465f1f27dde47514d1ef1ce819a470754224e0f511ed8712","size":466,"data":"","first_seen":"2025-05-26T06:04:46.73239Z","last_seen":"2026-03-10T21:29:00.06911Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/js/jquery.js","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cfb5b30b8061e04baae7e703f6ce455","sha1":"a5d551dce75ae0754c1a001aaaf7654878e7aee4","sha256":"3095da81424eadc32e00c1d6cc61b5be32252ce1a5f5b1e7a1ac514aa9cac1ea","sha512":"40fcd49d4611a2e0bea9d0aff879dbbd9394653fcc7331b195b58653e0a0d4da57a613b17144bbdf141a889768c342088184eb9bcd88141a067adc9266bf03e2","ssdeep":"6144:lgTIp2wD3W7LgNbKLzuiTfpQpWTbpcsUokmpCFxTmC33QwhsM76m7tOhXb:lgstTWb7SMnmsUokm06Cww7Ohr","tlshash":"c2c42a5fb746333206d321513a8b52ebf23a113c2659c4b859acc06d27b5e7c933b7a9","size":549260,"data":"","first_seen":"2026-02-21T03:18:55.169048Z","last_seen":"2026-03-10T21:29:00.069743Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/js/scripts.min.js","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6c06e89e82a8a7bdfc00996a7674848","sha1":"7a9fd7c34f36dc4c225636673540040f0d3f5ad9","sha256":"d662c3adafb0f4f250360d76b4a47b8677b1d115fee9ec93e7923039d8e1de48","sha512":"fa120c9930aa10a319ba2afadf6c4cb34fe19d3935294bb8c0cd3577329ee09cf330e97a9b700c93b43c2d67a7eef4f8ead3b84a241d63d062a8c5643d515bdd","ssdeep":"3072:lHZ6nNJiRTBCzvyMwjn0SpADH79cVONlqqMb8:5Z6nNcpeyMwjn0SpADH79cVONlqqMw","tlshash":"57d3188db36472a151e7225a539ed10263b65845b80ac4a470768cd7acbde8c03bfffd","size":141097,"data":"","first_seen":"2025-05-26T06:04:46.716427Z","last_seen":"2026-03-10T21:29:00.054828Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.xmrwallet.me/","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=IhpTXIcZygb0owdG; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rFJpgv8kGO9ZW6tc; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nx-powered-by: PHP/8.2.29\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-length: 6721\r\ncontent-type: text/html; charset=UTF-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":28671,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (795), with CRLF line terminators","md5":"f93917b409f88665063f6bc5e9532765","sha1":"a15948ea38bc399eb866354bb96c5837defe12e6","sha256":"73c5e2cf3c2190a4c25e9586355417b2b621eb2a0d796d2fafce872a0682ab3b","sha512":"50d4c818c67d259032a0b73af8af54f67ce561630175780b46a12987bc449b945896898aadae71272d5c6b5b33a3240519a9be16616c064059d47064c2605a08","ssdeep":"768:GvlWQLMwnU1RwKBI7KaJ2KKh3UxFz+oB7m+0vFEjVvZUkLm:6QQLMwnU1M6+w","tlshash":"ced25262b2c86636025353d3603277faf1ab8560ce669431f3fcb3377ba4c656927186","first_seen":"2026-03-05T05:08:23.931423Z","last_seen":"2026-03-05T06:43:02.827665Z","times_seen":5,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/bg-3.jpg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/bg-3.jpg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AvXlbZTqSDG5BfD4; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:00 GMT\r\netag: \"e5c2-5fd8cd7b89400\"\r\naccept-ranges: bytes\r\ncontent-length: 58818\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/jpeg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3076x4146, components 3","md5":"22793d4658b47ad97d9f7b826f06bc22","sha1":"06621b6455b956d83e253c4dd70e963419bb3c2a","sha256":"a4f78aea3aac7159cb7ae772a4e464ccd777a5d31ebbad52a4216e9b1cd616de","sha512":"2b7271cca70dd76edc0e99030063692fd5f25180fee4e7d046fc40abd29d9fd8954ee68a3e5f8e0ee1e3a1e125cd42fbd3be99b6926927630d8d24f6a6fffe1a","ssdeep":"768:Lqds10HdXSpwiUWAEwSyDOfboiLukVQ45QZ915iQdp:uG16dCuiUW1yDOU075IoYp","tlshash":"00432973eb8592a3c5ac173094db23283f264da1c74c5a0397991d33f9f67a8fd2a152","first_seen":"2025-05-26T06:04:46.705605Z","last_seen":"2026-03-10T21:29:00.059294Z","times_seen":53,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/logo.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cgKddTIq0G87wI5M; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:43:46 GMT\r\netag: \"8bf-5fd8cd6e2f480\"\r\naccept-ranges: bytes\r\ncontent-length: 2239\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95bdfdf5418cf1395b3a9bf0d31ad20e","sha1":"b025ab1dd42a32b3adaea6fad05c2ed0553521e6","sha256":"15e72fdb916883d853277aa3739c37ceea6b07f5daf89ceae59bc5a254b0da1a","sha512":"99cc491b2cf78c88ad891daf91d5e68a3e94e5941130e0361a2b24888eefc6cc5b1eace6fe08e41827ea592688bea21f7549abe97131834b5507cdafb84e5517","ssdeep":"","tlshash":"734160f4a3a0a0cd09a30874fb7a19ca573d68fab00048ccadae545935e7b93e44bb41","first_seen":"2025-05-26T06:04:46.726526Z","last_seen":"2026-03-10T21:29:00.053823Z","times_seen":53,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/main-bg.jpg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/main-bg.jpg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fPhqGKr7RwqmOKxp; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:14 GMT\r\netag: \"27bc0-5fd8cd88e3380\"\r\naccept-ranges: bytes\r\ncontent-length: 162752\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/jpeg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":162752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5400x3600, components 3","md5":"f2dc5954242b8216e4f666e56e13442b","sha1":"62a572a7a9596713dfdf736dcad0a8b054a11ef4","sha256":"e9248abdcdbce1a575f0110f42e440a462e606c2980b2bf5c0ca2e75c9e7eb52","sha512":"48f8c33d5861f3188bd90058465d670b656bdeab61010b2460e14004dea204e701ff0a855671dab8bdb22d8f11182f13aaa387aa581c5e194f2797bb69c0b9c7","ssdeep":"3072:y+wRC4pwkEw7ryCys0ZvYbrTv4V1vdxMgH1IE4zNEfRVDCdORjQGJ:yfgIEf/6bI5Ay1IpNEfX7lz","tlshash":"66f3bf77dba2ab57d39c2330868b07303b37c968839a4a074a695f71b1947d8fd7b142","first_seen":"2025-05-26T06:04:46.711018Z","last_seen":"2026-03-10T21:29:00.059791Z","times_seen":53,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/fonts/Inter-SemiBold.woff2","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /fonts/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.xmrwallet.me/css/main.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IhpTXIcZygb0owdG; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Tue, 28 Sep 2021 17:24:24 GMT\r\netag: \"19eb8-5cd117c1d8200\"\r\naccept-ranges: bytes\r\ncontent-length: 106168\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":106168,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106168, version 1.0","md5":"696df71a855c273da7f4df3f1e7c746f","sha1":"d539f97171c8e2d189f07a216b0d14d5468aac61","sha256":"07d609457ea2e93be9e7b5dd8e9a9a156d2e80144bcd94cf0adf05c553da053b","sha512":"438310edd8e7e9482806d1cb7a0069ef3e61653e9f216ddfb86cbbbf071271af5c4f0f60ab5b782ca6ef00a8d499bde4670783db37f5d8cb06af70e26dd1cc2f","ssdeep":"3072:HtKolW2ERaWRCe4qlaY4nydQKMnbAiCRVFr:HtKolW2iCe4EAFKMnbAiCRn","tlshash":"91a312ecd619c3beca274a3e86df277b0111b3678708964ac6d69f8452f33b8441d4a7","first_seen":"2023-05-07T22:36:59Z","last_seen":"2026-04-03T07:13:01.152179Z","times_seen":249,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/fonts/Inter-Bold.woff2","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /fonts/Inter-Bold.woff2 HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.xmrwallet.me/css/main.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YYmTZPmFq9VBePhB; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Tue, 28 Sep 2021 17:24:20 GMT\r\netag: \"1a15c-5cd117be07900\"\r\naccept-ranges: bytes\r\ncontent-length: 106844\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106844, version 1.0","md5":"9aa03c46fbe41e25c51289a3e78e9454","sha1":"9739b96f20de3e9fa4032545fe6b2e021299aff3","sha256":"01191e5d895aab8717f1aa2424b83f29b06735a8f61a67add5b107434d0e7187","sha512":"1de1b749fa89591bd3d61c96738f313a1b1a546890334b50e225f207c07b7352ddee59637ff9f3e4bc51f7023c6baeeb8f6ecb3c4fcc37a44635d30abfa44644","ssdeep":"1536:H97PTz0LyHhs2SxUZi1lRrjNcXwpysPtbSsBfX/5eB4gwcp7wawAW2m0Y5vxtzTl:dngJvyRsPtb1fvoRp7wa3W2m7V9o6lIu","tlshash":"0ba31235c683cc81fd45387d1237730b446b85badc16eb2e84131582dbadae5aee670b","first_seen":"2023-04-10T16:29:48Z","last_seen":"2026-04-03T07:13:01.217291Z","times_seen":313,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/favicon.ico","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=o7FfGkepOPyKpALX; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=x3fNZVTrUV9piU8C; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Thu, 12 Jul 2018 15:41:10 GMT\r\netag: \"47e-570cf313a5180\"\r\naccept-ranges: bytes\r\ncontent-length: 1150\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/vnd.microsoft.icon\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"80b0a659516f5460db2590fe2cf2a85a","sha1":"f8f686a9ee57b657e3e97cf26ed6f3366304a873","sha256":"2c63a044d1eb522df9d5934220a76e391961baaf6b6437827fac498d2c1b9b6e","sha512":"0e08dd9fcfcdeae78f69d0d3c0da08ec061f48b15e9468d79043943bcb23c35e2c6a5e460f3115841a88dc015c03a5488f04cc708270666bf5f24b5bd810bd81","ssdeep":"","tlshash":"35217d5f95d94d0dd294a63d50ef230860b4d306eac31743d1d67426a3b67888c6262e","first_seen":"2025-05-26T06:04:46.708322Z","last_seen":"2026-03-10T21:29:00.062384Z","times_seen":42,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/ico-2.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/ico-2.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=etGQhxZHCugToDfa; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:43:56 GMT\r\netag: \"12b3-5fd8cd77b8b00\"\r\naccept-ranges: bytes\r\ncontent-length: 4787\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4787,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09a0223623d4ee4816d623a93770f296","sha1":"af53226be27f48a2bbab966c326ea391f0e8f653","sha256":"08b546948de3d545112d01e3f672187b72b0903eca3ea62827bc1f406beef132","sha512":"3e59723736e28bc63e973d00c6123713c0e97e7670a7bda4587f3f84adbc09ca51f7f0c5288e8b440ede2bac5f591b061d449a724e1267b238f075d56805f169","ssdeep":"96:z3UvtOs8Pp67ZsTBNvRlXVStc6vP2USTY8a7LziuYYvbvOjrW:wvf7uzLaDbXij6","tlshash":"63a162f982bca2dd4487a729ef31d4a5232ea0fab157c5c48d9f93748053d84fb27840","first_seen":"2025-05-26T06:04:46.715407Z","last_seen":"2026-03-10T21:29:00.057233Z","times_seen":53,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/ico-6.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/ico-6.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=P8dHNclu92qLu2wP; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:20 GMT\r\netag: \"15c9-5fd8cd8e9c100\"\r\naccept-ranges: bytes\r\ncontent-length: 5577\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5577,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb74ce444cc695190233989c68a9c988","sha1":"1d64ae8afe27f44c984d21b43ea41c8aed4e01fb","sha256":"700e57eb67e4186237739be928d0e05c2dea1a817b8394ee029580176318a60b","sha512":"d2181c856b5c5bccc3d3e87f8a90cb2dace2227ac5f68e447cbdbc7974674e43187d3284b53a7725bfffe8b1541a0a144b1817db338b4cd37490f5668cf6b12d","ssdeep":"96:2+vM8CRXr9lra+u2/nhhdtfzYG/vExxQP7A4/cNkySSXEQcc1sJ6Xw/ASiTqOg1W:C8QJrPBxUKJA+ySSIHMg/ALgw","tlshash":"ccb1a5e8532c62dd64c7d22eef32ec50531ea0b9b06781894dafc768a0579c0fb4bc90","first_seen":"2025-05-26T06:04:46.719503Z","last_seen":"2026-03-10T21:29:00.054352Z","times_seen":53,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/js/jquery.js","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /js/jquery.js HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ORvhSMRZTBxThhId; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 18 Feb 2026 17:38:58 GMT\r\netag: \"8618c-64b1ca9ab3080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: text/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":549260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62413), with no line terminators","md5":"0e37356a9429a24d05e68d00229ff76f","sha1":"d57c1842c4fcc20e4aff97580fc5712a6fef2090","sha256":"61646302f26790c658b2e476c8087117dd63221c7e6b3dda232194a7223df85b","sha512":"1e54fbac52b2d392aef29c3a4780a4eca25f00cd7c023b796a77ce3ad675e57409ebcaeada6c0cebfa8c6c02e5366f67c8eca95fb6767649a3635b6c013cbc26","ssdeep":"6144:lgTIp2wD3W7LgNbKLzuiTfpQpWTbpcsUoknp4TmC33QwhsM76m7tOhXb:lgstTWb7SMnmsUokni6Cww7Ohr","tlshash":"afc42a5fb746333206d321513a8b52ebf23a513c2659c4b859acc06d27b5e7c933b7a8","first_seen":"2026-03-05T06:43:02.833328Z","last_seen":"2026-03-05T06:43:02.833328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/tor.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /tor.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qL0bgj141hL2nD3G; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Thu, 19 Feb 2026 00:06:57 GMT\r\netag: \"1cd6-64b2215354208\"\r\naccept-ranges: bytes\r\ncontent-length: 7382\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a46fd37fd16b007b97c52cf8b7c24ba","sha1":"60c073a1fdf1a8b859d0a8ee3ea25269ee6df008","sha256":"9d490aaeb13bd8189d64ec8ebbd77544d59e36809fe729d79b7ec31fcb5bd931","sha512":"83717cb76bf750a49ff69a34caa403202ef34992b2fd2262c49df719b0cbc14f4483d17b2e6cab63c33f25bd6f6380ec6ed3521b054ca1e12aa2a703c9b22664","ssdeep":"96:VkoIanHMDKxr5MOMMpmSkAE2XWWpW3wxLOt4ypArPCKMveSDNc24aVnvDfCT08:VksiC5MO9dxS6ypADI92Bof2p","tlshash":"cee186f5c3a942f0f7ee1b158cf0190d67a2a4b62a109e14f7dda8c48fb2e586104dd7","first_seen":"2026-02-21T03:18:55.180529Z","last_seen":"2026-03-10T21:29:00.061895Z","times_seen":20,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/ico-1.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/ico-1.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hthLUtTFY5JKHJ0U; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:10 GMT\r\netag: \"167e-5fd8cd8512a80\"\r\naccept-ranges: bytes\r\ncontent-length: 5758\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5758,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe25036dd4b136fd06e95c704769d560","sha1":"745f4cefdb320b27c4d151e3e72d36d14748e795","sha256":"9d39530709b9e8614f396330a965280adba383beede90bab89fd5edc4c6bbcd9","sha512":"3f1b4188d83a6e837f2915ecbc48c44523c557cdc9ced04bf1409c210006f30dcc6bc6386a74c0d798fe31dfce2b0ca4cb3a06756313ec4c14898972bdb106c7","ssdeep":"96:/N3Wt6EEEuzixIDlcKdCuaAyGaUheCob15P5v6P5Kmg+4r9gQnjCWDlVObW:FmUixKlXtTaUKi5Q12K","tlshash":"39c131f5576c939ca087a2adff27e8a1130fa0b5386ac1cc5d9fc7a4904b981fb17840","first_seen":"2025-05-26T06:04:46.711969Z","last_seen":"2026-03-10T21:29:00.063567Z","times_seen":53,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/main-bg-mob-min.png","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/main-bg-mob-min.png HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PC2N9mT3y7TyZiWE; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:18 GMT\r\netag: \"4ca0d-5fd8cd8cb3c80\"\r\naccept-ranges: bytes\r\ncontent-length: 313869\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1537 x 1025, 8-bit colormap, non-interlaced","md5":"881adc56fe142da9cf25fa73a0a4700e","sha1":"6c14d018a613d0f2aedb2581116bad3607327d50","sha256":"cc94edd838df4adc55ce2633c00a9fcbcc870200650df140329f4f1fd0c49414","sha512":"904bcc8c61dd6d1db992d88ada1c3f6e7d8b0664b41cc5b437fe652b47cce164e539fc76389579785958a77ca9959215aa9993215eae40ec7a3fef57a7fa875e","ssdeep":"6144:7LfpgcHSJRT7mc3oU+56l+4uSWnDpY01+MnE7vP3Lny58D0oWQ:7rtSJRvmc3a6o4oH+Mn0vfuc","tlshash":"b7642363f014c331e52d9b56263fc594b2b8e3b0c261fd20ebab1a9a6d49dd2c90075b","first_seen":"2025-05-26T06:04:46.722334Z","last_seen":"2026-03-10T21:29:00.067127Z","times_seen":42,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/ico-7.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/ico-7.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6SrDmSIwyMZBCMCb; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:04 GMT\r\netag: \"c48-5fd8cd7f59d00\"\r\naccept-ranges: bytes\r\ncontent-length: 3144\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931a91a28ee2a8254154843aa1f0f855","sha1":"bfe66874d2c83dda00e7aa373192d3a3c1bb027e","sha256":"ab9226498b999eae84e141cce8aaad49a943fd282f94593828b5e9c43df0de82","sha512":"fdeb255495ac4324c53e94ddc1be78e5caea69fdf969ceb647dffd4eab0f01dd2c29bba6f38915f0012c83fc28163cbb09545a474eacddf033d8272fb948299b","ssdeep":"","tlshash":"445175e692a8faecb886923ddb67e161231d60b6b162dc4d5c4f4f5c9407bc1fa03530","first_seen":"2025-05-26T06:04:46.729341Z","last_seen":"2026-03-10T21:29:00.058242Z","times_seen":53,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T06:42:31.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yqOKssJZf0UgSLbv; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:31 GMT\n__ddg10_=1772692951; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:31 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:31 GMT\n__ddg1_=SVcEHIQRy7YNbWf7oqXY; Domain=.xmrwallet.me; HttpOnly; Path=/; Expires=Fri, 05-Mar-2027 06:42:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:31 GMT\r\nx-powered-by: PHP/8.2.29\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-length: 6721\r\ncontent-type: text/html; charset=UTF-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28671,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (795), with CRLF line terminators","md5":"f93917b409f88665063f6bc5e9532765","sha1":"a15948ea38bc399eb866354bb96c5837defe12e6","sha256":"73c5e2cf3c2190a4c25e9586355417b2b621eb2a0d796d2fafce872a0682ab3b","sha512":"50d4c818c67d259032a0b73af8af54f67ce561630175780b46a12987bc449b945896898aadae71272d5c6b5b33a3240519a9be16616c064059d47064c2605a08","ssdeep":"768:GvlWQLMwnU1RwKBI7KaJ2KKh3UxFz+oB7m+0vFEjVvZUkLm:6QQLMwnU1M6+w","tlshash":"ced25262b2c86636025353d3603277faf1ab8560ce669431f3fcb3377ba4c656927186","first_seen":"2026-03-05T05:08:23.931423Z","last_seen":"2026-03-05T06:43:02.827665Z","times_seen":5,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":123,"dns":27,"connect":23,"send":0,"wait":174,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/css/main.min.css","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /css/main.min.css HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=duIIvaAiuz7rfYbM; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Thu, 19 Feb 2026 00:29:30 GMT\r\netag: \"ea3f-64b2265e07222-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-length: 11603\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":59967,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58039), with CRLF line terminators","md5":"8c2d249787867ab9ea8b395c91e028d7","sha1":"c64241b21ceb448d87740b78f8ef63ba6063e467","sha256":"f69b42f78220120198354610c63b66496ed2cf2be2d80c959a686f0a214e4866","sha512":"7ac22f53fb7285bb20d8a429c50a382b23a762087b0846b468004e42e12420b97b59bcef53e9d373deca8baee10fc52dcd4b8de52cad54105c41515e347cfdcd","ssdeep":"768:Cbb6s7SEL8m/f+ifi5oAJmXA8zHwZ3D7hsrj0WNBs3/WG:+6uS4VDfi5ohXpQZHhEjqH","tlshash":"5743c7371600332cb13bcf659bd416a99634c423a2130bfef691bd65c7eb6a5027a74e","first_seen":"2026-02-21T03:18:55.166085Z","last_seen":"2026-03-10T21:29:00.062968Z","times_seen":20,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/ico-3.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/ico-3.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ikhrclmE8TsWG8iq; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:02 GMT\r\netag: \"18bd-5fd8cd7d71880\"\r\naccept-ranges: bytes\r\ncontent-length: 6333\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6333,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20d7c60ff3a7d518b53322afd7532b8e","sha1":"8f323bd27da6fe14984d51124890acc8cde0bf9e","sha256":"859eb46de6abdfc0566e306f934cc7d53ce2124aa0935cfa6bd8daa864574d81","sha512":"e961247cf1034b492eff7fcc8b156ff57c6373bd56ed9b74e4616f668d66ed5f3a4011acfb9b7a7426be3dd3033dd00567d99027713c9db2bed407dd547ac75b","ssdeep":"96:WY6Hht3QSsD0kPxk4+TEciCVXS/d7uWrArfWqVK4QmO8LwGSM1SmeHtEMcsOFW:j6Bt3k4BXS/gWrWL1FO8Lwm1SDfcrg","tlshash":"49d130f5975ca6dda8cfea1ddf22c4a8230f64b6f46786c88c5e87b59007a81fb17410","first_seen":"2025-05-26T06:04:46.727487Z","last_seen":"2026-03-10T21:29:00.067642Z","times_seen":53,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/ico-5.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/ico-5.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nj0OG4fm5MF4T8df; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:43:58 GMT\r\netag: \"13a3-5fd8cd79a0f80\"\r\naccept-ranges: bytes\r\ncontent-length: 5027\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5027,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94fabc3ca067f88cb391a5ff5aa99679","sha1":"580c51d480cc29b7bc13b2a8dd6a5f0d3e75821a","sha256":"98f125506abf1d8f277a3e365a5efef067caba4cca844f0cf4db75f6a1e0b3d2","sha512":"37e55e532e95f3aba4d7947da6a1e6a398f45fbb55783a9e14ffe7e8cb46b7fe00995f2db6e5e4c1e62b7dc62e078e7cf1914a62d4866f4078ac29bf05f86187","ssdeep":"96:WxEFiLlOhYEyEk3KgVrbCPL3bGhAqGsGEQUOGW:tFiLlOfw3Ki/CD3bCGLDN","tlshash":"7ea182f4a778f38c55d3b81deb31f924530e64b9b49bc4894d9f8368904b985fb6b810","first_seen":"2025-05-26T06:04:46.713707Z","last_seen":"2026-03-10T21:29:00.057753Z","times_seen":53,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/fonts/Inter-Black.woff2","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /fonts/Inter-Black.woff2 HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.xmrwallet.me/css/main.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p7DOkvvaVfrMGBsH; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Tue, 28 Sep 2021 17:24:20 GMT\r\netag: \"19dc0-5cd117be07900\"\r\naccept-ranges: bytes\r\ncontent-length: 105920\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":105920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105920, version 1.0","md5":"e0435a12e8f7002db1aa83f0f30d6a7e","sha1":"d92ed6e383e5b5b1d06ec5ae5d18b54968edacec","sha256":"eec0ae4bb52981a6ca92d58df2a6c7d9cc64f08ffbad2e1dbc3740e8a8a026f7","sha512":"9b1cbd44026819ae5a33ec19c5a565d32c187750576269b24ebaa0cc1a022984009883c96fdfc2d1d3b9aea3bd671dc8f51f5cbab462f5e06508dc1ab4881d7d","ssdeep":"3072:7S8mjOB4T8LcrTbghB6V8sSjFs2LdEyKua1t0gbBYG:tB0Zbghi+CmEyKH","tlshash":"94a31239154c66b7d91fdc343a65f908f2247a22d302ebd7ceb7482a27f82473741a96","first_seen":"2023-05-23T08:48:37Z","last_seen":"2026-03-24T14:05:37.753182Z","times_seen":92,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/bg-2.jpg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/bg-2.jpg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=E6wZijsBGa0CbZjI; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:12 GMT\r\netag: \"1301b-5fd8cd86faf00\"\r\naccept-ranges: bytes\r\ncontent-length: 77851\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/jpeg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":77851,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3000x3000, components 3","md5":"7d405c84c057b3cd9b1126f7bd1e81ce","sha1":"fb9dcc59737fcd04933e0f466e8d781cee088763","sha256":"c27edc9fff36d2995489f7baa21e2abecea314580b2fa63490fe9d8d251ef09c","sha512":"a0753fe08f990ee0f695b3e95dd06c4060ae51f874612638ffe0a43d6f74f13c28947f25fc1266a1b428d11354d9293c011ee3741fe2e315390f3bd7703a2009","ssdeep":"1536:Fnd45mDUF/SGQBv321l3nu9QFxTNKbV+sV/5HewuTwoPmv:FnxURo8l3IGxoR+OtewJv","tlshash":"4673b07a4bf25e7ec38c0f30eb4727302913cc61675b518b096b4e66b5d07e8ae7a251","first_seen":"2025-05-26T06:04:46.712778Z","last_seen":"2026-03-10T21:29:00.06409Z","times_seen":53,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":54,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/fonts/Inter-Medium.woff2","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /fonts/Inter-Medium.woff2 HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.xmrwallet.me/css/main.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MwJdWp8LRz3W93Yi; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Tue, 28 Sep 2021 17:24:22 GMT\r\netag: \"19e7c-5cd117bfefd80\"\r\naccept-ranges: bytes\r\ncontent-length: 106108\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":106108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106108, version 1.0","md5":"eea97ded621cd8a18067c7243b19ceea","sha1":"d88b0b7a77cbb6ea033f692c05d5855a7be7d0ea","sha256":"d6e2531976fa618cede5863027366e4011760b0610d7136a8f7d7ed149c26348","sha512":"3ae400bb27c8db14d060ff83506d70b90de06612bf40ede0c7fbe1d4b302fabeeecee8d85c886b37b7aca06d4b7daeae473c8b542faa98083036de7fd3506c72","ssdeep":"3072:goH303tZuta/VoRorlduZwOLYGhLDSCWTXUP:gcAnsCVoRGlGwwPxx","tlshash":"8fa3123cb10d4bb3cdd99b3aba1735b5a0891a04774f24f6c14ca73662ad9e0b40bd5e","first_seen":"2023-04-10T16:29:48Z","last_seen":"2026-04-02T08:16:35.400965Z","times_seen":310,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=YYmTZPmFq9VBePhB; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=o7FfGkepOPyKpALX; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nx-powered-by: PHP/8.2.29\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-length: 6721\r\ncontent-type: text/html; charset=UTF-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28671,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (795), with CRLF line terminators","md5":"f93917b409f88665063f6bc5e9532765","sha1":"a15948ea38bc399eb866354bb96c5837defe12e6","sha256":"73c5e2cf3c2190a4c25e9586355417b2b621eb2a0d796d2fafce872a0682ab3b","sha512":"50d4c818c67d259032a0b73af8af54f67ce561630175780b46a12987bc449b945896898aadae71272d5c6b5b33a3240519a9be16616c064059d47064c2605a08","ssdeep":"768:GvlWQLMwnU1RwKBI7KaJ2KKh3UxFz+oB7m+0vFEjVvZUkLm:6QQLMwnU1M6+w","tlshash":"ced25262b2c86636025353d3603277faf1ab8560ce669431f3fcb3377ba4c656927186","first_seen":"2026-03-05T05:08:23.931423Z","last_seen":"2026-03-05T06:43:02.827665Z","times_seen":5,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/blog/smart_practices_using_web_wallets_s.jpg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/blog/smart_practices_using_web_wallets_s.jpg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gw6RcZNOWykaVJY7; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlocation: https://www.xmrwallet.me/\r\ncontent-length: 292\r\ncontent-type: text/html; charset=iso-8859-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":28671,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/blog/manage_multiple_monero_wallets_s.jpg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/blog/manage_multiple_monero_wallets_s.jpg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8MpYHX13Cyerb60c; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Mon, 31 Jul 2023 14:11:36 GMT\r\netag: \"13662-601c902207600\"\r\naccept-ranges: bytes\r\ncontent-length: 79458\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/jpeg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":79458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=474, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=948], baseline, precision 8, 600x300, components 3","md5":"4207847cc955e497e48907df41ebe084","sha1":"77e6d4b20604062458ae19c00d46283f7ee4cc75","sha256":"a7ba66a7f394dda8d9869d11f046cd0c4dfcb655900e5aeae4b4640eb8d859a4","sha512":"915be91fb466a65d0d6cb1abb44955c6a6e4af1b7532f1c13e12c5a573857dcf9f32136a45c22e011fb9bba32e392fb6f9a5639f77478bc5fd0b8440525f19e4","ssdeep":"1536:GK9lGtkMkq03KN03pPmRV7mJqASj458ks34At+zUx2dC/lj+a0h:PdrdKNWKUsFoArJjqh","tlshash":"8e73f10d9796ac14eae605f694d0d6096b1fbca65e63716a3e9c39143b20bf04c6cb0b","first_seen":"2025-05-26T06:04:46.717446Z","last_seen":"2026-03-10T21:29:00.055447Z","times_seen":52,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/blog/exploring_best_monero_wallets_s.jpg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/blog/exploring_best_monero_wallets_s.jpg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kkfTuYpSzC1wJS5p; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlocation: https://www.xmrwallet.me/\r\ncontent-length: 292\r\ncontent-type: text/html; charset=iso-8859-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":28671,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/fonts/Inter-Regular.woff2","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /fonts/Inter-Regular.woff2 HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.xmrwallet.me/css/main.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=1sh8GOMzkw4zVJJr; __ddg10_=1772692952; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fWhlirsYJhv6hubJ; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Tue, 28 Sep 2021 17:24:22 GMT\r\netag: \"18618-5cd117bfefd80\"\r\naccept-ranges: bytes\r\ncontent-length: 99864\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99864, version 1.0","md5":"24a88db8dcb2ace5ed6efdc866dd03f5","sha1":"ef868b77f19fe390d938740bf0af834967e28e4e","sha256":"413a527c0ed1833fea654b2bb065bda9ebe46bc1f585cf2d481f8a79dbc51610","sha512":"87926cdb2d70150b65ddcb422f21ef04d8f4c897115438a6f570c3022f101a9e7affed780663548153c8aa0f2d11614557ed2a6af219e17ee16525bfc2637e61","ssdeep":"1536:rRxbPen3CMDtqnb2+M8f5JtdkhqZNYoPTSIDq8NtChKIyKq/Xrf7DrtmCE4Fiw8t:9xzenSMi2H84oPTTNAoeeXrf/pma8rJ","tlshash":"7fa312457744efdcd5be8737eb53f73db22aab1aa43632c09d15132a9b6882453c490c","first_seen":"2023-04-10T16:29:48Z","last_seen":"2026-04-03T07:13:01.185732Z","times_seen":431,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/img/ico-4.svg","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /img/ico-4.svg HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1sh8GOMzkw4zVJJr; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 07 Jun 2023 16:44:10 GMT\r\netag: \"14af-5fd8cd8512a80\"\r\naccept-ranges: bytes\r\ncontent-length: 5295\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5295,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d4be919a7101a53da0671b651d88339","sha1":"511e4dc53c757a67c1b994a061768bce6d992d20","sha256":"9fd2a9ad8f3df4e00ea67a63182eddaf84f1c18f95c6dc5b7efc3b4244b39622","sha512":"5e1192f294a0b98bcd2ca99a46dbcd25542df7d5dac411a49791bddcf30aca6df9d021e262241d823756a66eeaeb38e49acbd60985f65c4dfd11c1614b7eaab4","ssdeep":"96:uQRUSUuWgsRRHmEVonUA5giJJoYTD44yFPmwtiXceTgIWhhjcOyW:9OSURg4OIPYnitiX7g/P7p","tlshash":"fbb184f4522c539d98c7d52def23d9a0530f60bab98681c58ecf87a8a40b6c1fa03854","first_seen":"2025-05-26T06:04:46.728393Z","last_seen":"2026-03-10T21:29:00.068142Z","times_seen":53,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xmrwallet.me/js/scripts.min.js","fqdn":"www.xmrwallet.me","domain":"xmrwallet.me","tld":"me"},"ip":{"addr":"185.129.100.248","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xmrwallet.me/","date":"2026-03-05T06:42:32.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xmrwallet.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:33:49 GMT","end":"Fri, 29 May 2026 22:33:48 GMT"},"fingerprint":{"sha1":"9F:B2:87:C9:F7:6E:8E:B5:BF:55:50:DB:03:5C:51:6F:99:EE:6F:04","sha256":"38:1F:D0:57:AB:A2:64:DC:4B:3E:32:2B:E7:6B:6C:4B:A4:83:E0:98:22:8D:AE:21:BC:6E:FA:41:DE:82:19:AC"}}},"request":{"raw":"GET /js/scripts.min.js HTTP/1.1\r\nHost: www.xmrwallet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xmrwallet.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yqOKssJZf0UgSLbv; __ddg10_=1772692951; __ddg9_=91.90.42.154; __ddg1_=SVcEHIQRy7YNbWf7oqXY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=y8DU29TLbzVrIbTH; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg10_=1772692952; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\n__ddg9_=91.90.42.154; Domain=.xmrwallet.me; Path=/; Expires=Thu, 05-Mar-2026 07:02:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 05 Mar 2026 06:42:32 GMT\r\nlast-modified: Wed, 03 Nov 2021 15:41:20 GMT\r\netag: \"22729-5cfe43dcea800-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-content-security-policy: allow 'self'\r\nreferrer-policy: same-origin\r\ncontent-length: 37276\r\ncontent-type: text/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141097,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"a6c06e89e82a8a7bdfc00996a7674848","sha1":"7a9fd7c34f36dc4c225636673540040f0d3f5ad9","sha256":"d662c3adafb0f4f250360d76b4a47b8677b1d115fee9ec93e7923039d8e1de48","sha512":"fa120c9930aa10a319ba2afadf6c4cb34fe19d3935294bb8c0cd3577329ee09cf330e97a9b700c93b43c2d67a7eef4f8ead3b84a241d63d062a8c5643d515bdd","ssdeep":"3072:lHZ6nNJiRTBCzvyMwjn0SpADH79cVONlqqMb8:5Z6nNcpeyMwjn0SpADH79cVONlqqMw","tlshash":"57d3188db36472a151e7225a539ed10263b65845b80ac4a470768cd7acbde8c03bfffd","first_seen":"2025-05-26T06:04:46.716427Z","last_seen":"2026-03-10T21:29:00.054828Z","times_seen":53,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":55,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"www.xmrwallet.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}